CVE-2017-10912

Xen through 4.8.x mishandles page transfer, which allows guest OS users to obtain privileged host OS access, aka XSA-217...

CVE-2017-10912

CVE-2017-10912 affects Xen hypervisor; Xen 4.8.x and older mishandles page transfers (XSA-217), enabling a privileged guest OS escalation to host OS. The issue is central to Xen’s grant/page handling and can lead to host-level privilege escalation, per Debian/GLSA coverage. Remediation in public ...

SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2017:1742-1)

This update for xen fixes several issues. These security issues were fixed : - Page transfer might have allowed PV guest to elevate privilege XSA-217, bsc1042882 - Races in the grant table unmap code allowed for informations leaks and potentially privilege escalation XSA-218, bsc1042893 -...

Fedora 24 : xen (2017-b3bdaf58bc)

xen: various flaws 1463247 blkif responses leak backend stack data XSA-216 page transfer may allow PV guest to elevate privilege XSA-217 Races in the grant table unmap code XSA-218 x86: insufficient reference counts during shadow emulation XSA-219 x86: PKRU and BND leakage between vCPU-s XSA-220...

Fedora 25 : xen (2017-c3149b5fcb)

xen: various flaws 1463247 blkif responses leak backend stack data XSA-216 page transfer may allow PV guest to elevate privilege XSA-217 Races in the grant table unmap code XSA-218 x86: insufficient reference counts during shadow emulation XSA-219 x86: PKRU and BND leakage between vCPU-s XSA-220...

Amazon Linux: Security Advisory (ALAS-2013-217)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Internet Explorer CCaret UpdateScreenCaret Memory Corruption

Added: 10/03/2013 CVE: CVE-2013-3205 BID: 62208 OSVDB: 97094 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem Microsoft Internet Explorer contains a use-after-free error that is triggered when handling a CCaret object. The...

MS13-069: Cumulative Security Update for Internet Explorer (2870699)

The remote host is missing Internet Explorer IE Security Update 2870699. The installed version of IE is affected by multiple vulnerabilities that could allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid6982...

26 Underground Hacking Exploit Kits available for Download !

List of Hacking Exploit Kits : 1. Unknow 2. Tor 3. Target-Exploit 4. Smart pack 5. RDS 6. My poly sploit 7. multisploit 8. mypack-009 9. mypack-091 10. mypack-086 11. mypack-081 12. Mpack 13. Infector 14. Ice-pack-1 15. Ice-pack-2 16. Ice-pack-3 17. G-pack 18. Fire pack -1 19. Fire Pack -2 20...

Mandrake Security Advisory MDVSA-2009:217 (mozilla-thunderbird)

The remote host is missing an update to mozilla-thunderbird announced via advisory MDVSA-2009:217. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

Ubuntu 5.10 : inkscape vulnerability (USN-217-1)

A buffer overflow has been discovered in the SVG importer of Inkscape. By tricking an user into opening a specially crafted SVG image this could be exploited to execute arbitrary code with the privileges of the Inkscape user. Note that Tenable Network Security has extracted the preceding...

HP-UX PHSS_27656 : HPSBUX0209-217 Sec. Vulnerability in Apache OpenSSL (rev.2)

s700800 11.04 Webproxy server 2.0 update : Remotely exploitable potential vulnerabilities have been reported in CA-2002-21 and CVE-2002-0658. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS27656. The text...