89 matches found
Ubuntu: Security Advisory (USN-346-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
virt:rhel and virt-devel:rhel security, bug fix, and enhancement update
An update is available for libguestfs, libnbd, libtpms, libguestfs-winsupport, nbdkit, supermin, libiscsi, hivex, libvirt, netcf, perl-Sys-Virt, seabios, qemu-kvm, swtpm, virt-v2v, sgabios, libvirt-dbus, libvirt-python. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS...
ALSA-2022:1759 Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update
Kernel-based Virtual Machine KVM offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the...
virt:kvm_utils security update
qemu-kvm 4.2.1.16.el8 - Document CVE-2021-4145 as fixed Mark Kanda Orabug: 33791496 CVE-2021-4145 - migration: Tally pre-copy, downtime and post-copy bytes independently David Edmondson - migration: Introduce ramtransferredadd David Edmondson - ACPI ERST: specification for ERST support Eric...
Huawei EulerOS: Security Advisory for qemu (EulerOS-SA-2022-1598)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle Linux 7 : qemu (ELSA-2022-9344)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9344 advisory. - Document CVE-2021-4145 as fixed Mark Kanda Orabug: 33791496 CVE-2021-4145 Tenable has extracted the preceding description block directly from the Oracle Linux...
qemu security update
15:4.2.1-16.el7 - Document CVE-2021-4145 as fixed Mark Kanda Orabug: 33791496 CVE-2021-4145 - migration: Tally pre-copy, downtime and post-copy bytes independently David Edmondson - migration: Introduce ramtransferredadd David Edmondson - ACPI ERST: specification for ERST support Eric DeVolder -...
Mageia: Security Advisory (MGASA-2016-0228)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-4145
creationtimestamp| type| source ---|---|--- 2022-01-25 22:19:02+00:00| seen| https://t.me/cibsecurity/36265...
DEBIAN-CVE-2021-4145
A NULL pointer dereference issue was found in the block mirror layer of QEMU in versions prior to 6.2.0. The self pointer is dereferenced in mirrorwaitonconflicts without ensuring that it's not NULL. A malicious unprivileged user within the guest could use this flaw to crash the QEMU process on t...
CVE-2021-4145
A NULL pointer dereference issue was found in the block mirror layer of QEMU in versions prior to 6.2.0. The self pointer is dereferenced in mirrorwaitonconflicts without ensuring that it's not NULL. A malicious unprivileged user within the guest could use this flaw to crash the QEMU process on t...
CVE-2021-4145
CVE-2021-4145: QEMU block mirror NULL pointer dereference in mirror_wait_on_conflicts() where self may be NULL. This can crash the QEMU process on the host when mirroring data reaches the node threshold. Affected products/versions: QEMU up to, but not including, 6.2.0. Root cause: dereferencing a...
CVE-2021-4145
A NULL pointer dereference issue was found in the block mirror layer of QEMU. The self pointer is dereferenced in mirrorwaitonconflicts without ensuring that it's not NULL. A malicious unprivileged user within the guest could use this flaw to crash the QEMU process on the host when writing data...
Ubuntu: Security Advisory (USN-4145-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-4145
CVE-2019-4145 affects IBM Security Access Manager (ISAM) and ISAM Appliance. Affected versions are 9.0.1 through 9.0.6, where a vulnerability could disclose highly sensitive information to a local user in specialized conditions, potentially enabling further attacks. IBM’s remediation is to update...
CVE-2018-4145
CVE-2018-4145 is a memory-corruption vulnerability reported across Apple products. The consolidated description spans iOS, tvOS, watchOS, Safari, iTunes for Windows, and iCloud for Windows, indicating multiple memory corruption issues addressed through improved memory handling. Affected versions ...
Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2018-4145)
The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4145 advisory. - x86/fpu: Make eager FPU default Mihai Carabas Orabug: 28156175 CVE-2018-3665 - ALSA: hrtimer: Fix stall by hrtimercancel Takashi Iwai Orabug:...
macOS : Apple Safari < 11.1 Multiple Vulnerabilities
The version of Apple Safari installed on the remote macOS or Mac OS X host is prior to 11.1. It is, therefore, affected by multiple vulnerabilities as described in the HT208695 security advisory. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108805;...
Debian DSA-4145-1 : gitlab - security update
Several vulnerabilities have been discovered in Gitlab, a software platform to collaborate on code : - CVE-2017-0915/ CVE-2018-3710 Arbitrary code execution in project import. - CVE-2017-0916 Command injection via Webhooks. - CVE-2017-0917 Cross-site scripting in CI job output. - CVE-2017-0918...