CVE-2014-7155

The x86emulate function in arch/x86/x86emulate/x86emulate.c in Xen 4.4.x and earlier does not properly check supervisor mode permissions, which allows local HVM users to cause a denial of service guest crash or gain guest kernel mode privileges via vectors involving an 1 HLT, 2 LGDT, 3 LIDT, or 4...

CVE-2014-7155

CVE-2014-7155 : In Xen 4.4.x and earlier, the x86_emulate implementation in arch/x86/x86_emulate/x86_emulate.c fails to properly check supervisor mode permissions. This allows a local HVM user to crash the guest (DoS) or potentially elevate to guest kernel mode via the instructions HLT, LGDT, LID...

[SECURITY] [DSA 3041-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3041-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 01, 2014 http://www.debian.org/security/faq -...

CVE-2008-7155

NetRisk 1.9.7 is reported to misrestrict access to admin/change_submit.php, enabling remote attackers to change arbitrary user passwords via a direct request. This is documented in CVE-2008-7155 with a CVSS v2 base score of 7.5 (HIGH) and network attack vector. OpenVAS entries refer to a NetRisk ...

CVE-2006-7155

CVE-2006-7155 affects Novell BorderManager 3.8 SP4, where ISAKMP cookies generated for the same source IP and port within the same day allow remote attackers to cause a denial of service and enable replay attacks. The issue is noted as possibly related to CVE-2006-5286. Connected sources confirm ...