openSUSE: Security Advisory for xen (openSUSE-SU-2016:2497-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Xen Multiple Vulnerabilities (XSA-186, XSA-187)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by multiple vulnerabilities : - A flaw exists due to improper handling of instruction pointer truncation when emulating HVM instructions. An attacker on the guest can exploit this to gain...

Fedora 23 : xen (2016-1c3374bcb9)

x86: Disallow L3 recursive pagetable for 32-bit PV guests XSA-185, CVE-2016-7092 1374470 x86: Mishandling of instruction pointer truncation during emulation XSA-186, CVE-2016-7093 1374471 x86 HVM: Overflow of shctxt-segreg XSA-187, CVE-2016-7094 1374473 Note that Tenable Network Security has...

CVE-2016-7094

CVE-2016-7094 is a buffer overflow in Xen up to 4.7.x and earlier. It affects Xen’s x86 HVM guests running with shadow paging, where a guest administrator (local) can trigger a pagetable update to cause a Denial of Service on the host. The underlying issue is an overflow in the shadow pagetable h...

Citrix XenServer Multiple Security Updates (CTX216071)

A number of security vulnerabilities have been identified in Citrix XenServer that may allow malicious privileged code running within a guest VM to compromise the host. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright...

Fedora 24 : xen (2016-7d2c67d1f5)

x86: Disallow L3 recursive pagetable for 32-bit PV guests XSA-185, CVE-2016-7092 1374470 x86: Mishandling of instruction pointer truncation during emulation XSA-186, CVE-2016-7093 1374471 x86 HVM: Overflow of shctxt-segreg XSA-187, CVE-2016-7094 1374473 Note that Tenable Network Security has...

Debian DSA-3663-1 : xen - security update

Multiple vulnerabilities have been discovered in the Xen hypervisor. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2016-7092 XSA-185 Jeremie Boutoille of Quarkslab and Shangcong Luan of Alibaba discovered a flaw in the handling of L3 pagetable entries,...

[SECURITY] [DLA 614-1] xen security update

Package : xen Version : 4.1.6.lts1-2 CVE ID : CVE-2016-7092 CVE-2016-7094 Multiple vulnerabilities have been discovered in the Xen hypervisor. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2016-7092 XSA-185 Jeremie Boutoille of Quarkslab and Shangcong Lua...

[SECURITY] [DSA 3663-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3663-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 09, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3663-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3663-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 09, 2016 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3663-1 (xen - security update)

Multiple vulnerabilities have been discovered in the Xen hypervisor. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2016-7092 XSA-185 Jeremie Boutoille of Quarkslab and Shangcong Luan of Alibaba discovered a flaw in the handling of L3 pagetable entries,...

DSA-3663-1 xen - security update

Bulletin has no description...

OracleVM 3.2 : xen (OVMSA-2016-0104)

The remote OracleVM system is missing necessary patches to address critical security updates : - From: Andrew Cooper Subject: x86/shadow: Avoid overflowing shctxt-segreg hvmgetsegreg does not perform a range check on its input segment, calls hvmgetsegmentregister and writes straight into...

OracleVM 3.4 : xen (OVMSA-2016-0102)

The remote OracleVM system is missing necessary patches to address critical security updates : - BUILDINFO: commit=a83239e012959a65503ebb44ee9c54620a9d78f5 - evtchn-fifo: prevent use after free Boris Ostrovsky CVE-2016-7154 - x86/segment: Bounds check accesses to emulation ctxt-segreg Andrew Coop...

DLA-614-1 xen - security update

Bulletin has no description...

CVE-2015-7094

CVE-2015-7094 affects CFNetwork HTTPProtocol in Apple iOS before 9.2 and OS X before 10.11.2. A crafted URL allows man-in-the-middle attackers to bypass HSTS protection. Documented impact is limited to bypassing HSTS via a crafted URL, enabling potential MITM. The vulnerability is addressed in iO...

CVE-2013-7094

CVE-2013-7094 : A SQL injection vulnerability exists in the RSDDCVER_COUNT_TAB_COLS function of SAP NetWeaver 7.30. Remote attackers can potentially execute arbitrary SQL commands via unspecified vectors. The connected documents confirm the affected product/version and vulnerable component; no ex...

CVE-2008-7094

Campaign/CampaignListener in the listener server in Unica Affinium Campaign 7.2.1.0.55 allows remote attackers to cause a denial of service server crash via a crafted length field that triggers 1 connection exhaustion or 2 memory allocation failure...

CVE-2008-7094

The CVE-2008-7094 entry concerns Campaign/CampaignListener in Unica Affinium Campaign 7.2.1.0.55. A crafted length field in the listener server can cause a denial of service (server crash) by triggering connection exhaustion or memory allocation failure. The provided sources show a DoS impact but...

CVE-2006-7094

ftpd, as used by Gentoo and Debian Linux, sets the gid to the effective uid instead of the effective group id before executing /bin/ls, which allows remote authenticated users to list arbitrary directories with the privileges of gid 0 and possibly enable additional attack vectors...