Citrix XenServer Multiple Vulnerabilities (CTX232096)

The version of Citrix XenServer running on the remote host is missing a security hotfix. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108886; scriptversion"1.5";...

Fedora Update for xen FEDORA-2018-c553a586c8

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 1300-1] xen security update

Package : xen Version : 4.1.6.lts1-13 CVE ID : CVE-2018-7540 CVE-2018-7541 Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in denial of service, informations leaks or privilege escalation. For Debian 7 "Wheezy", these problems have been fixed in version...

OracleVM 3.4 : xen (OVMSA-2018-0020) (Meltdown) (Spectre)

The remote OracleVM system is missing necessary patches to address critical security updates : - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8 - BUILDINFO: xen commit=9ccc143584e12027a8db854d19ce8a120d22cfac - BUILDINFO: QEMU upstream...

[SECURITY] [DSA 4131-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4131-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 04, 2018 https://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-4131-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Xen guest_remove_page() Function Pagetable Unpinning Handling Guest-to-host DoS (XSA-252)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by a denial of service vulnerability. Note that Nessus has checked the changeset versions based on the xen.git change log. Nessus did not check guest hardware configurations or if patches we...

ALPINE-CVE-2018-7540

An issue was discovered in Xen through 4.10.x allowing x86 PV guest OS users to cause a denial of service host OS CPU hang via non-preemptable L3/L4 pagetable freeing...

CVE-2018-7540

CVE-2018-7540 affects the Xen hypervisor (through 4.10.x) enabling local x86 PV guests to trigger a host-DOS via non-preemptable L3/L4 pagetable freeing. This can cause host OS CPU hang. The issue is discussed in the Xen advisory XSA-252 with DoS via pagetable freeing. Mitigation is to apply the ...

CVE-2017-7540

rubygem-safemode, as used in Foreman, versions 1.3.2 and earlier are vulnerable to bypassing safe mode limitations via special Ruby syntax. This can lead to deletion of objects for which the user does not have delete permissions or possibly to privilege escalation...

CVE-2017-7540

rubygem-safemode, as used in Foreman, versions 1.3.2 and earlier are vulnerable to bypassing safe mode limitations via special Ruby syntax. This can lead to deletion of objects for which the user does not have delete permissions or possibly to privilege escalation...

CVE-2017-7540

rubygem-safemode, as used in Foreman, versions 1.3.2 and earlier are vulnerable to bypassing safe mode limitations via special Ruby syntax. This can lead to deletion of objects for which the user does not have delete permissions or possibly to privilege escalation...

CVE-2017-7540

The CVE-2017-7540 entry concerns rubygem-safemode used by Foreman up to v1.3.2. Concrete details in connected documents indicate a bypass of safe mode restrictions via special Ruby syntax, allowing deletion of objects without delete permissions and potential privilege escalation. Affected compone...

CVE-2017-7540

rubygem-safemode, as used in Foreman, versions 1.3.2 and earlier are vulnerable to bypassing safe mode limitations via special Ruby syntax. This can lead to deletion of objects for which the user does not have delete permissions or possibly to privilege escalation...

CVE-2014-7540

...

CVE-2014-7540

CVE-2014-7540 entry rejected/not used; this ID does not represent an active vulnerability.

CVE-2016-7540

CVE-2016-7540 concerns ImageMagick, specifically the code path coders/rgf.c, with vulnerable builds of ImageMagick prior to 6.9.4-10. An attacker can remotely trigger a denial of service (assertion failure) by converting an image to the RGf format. The provided sources consistently state the vuln...

openSUSE Security Update : ImageMagick (openSUSE-2016-1282)

This update for ImageMagick fixes the following issues: These vulnerabilities could be triggered by processing specially crafted image files, which could lead to a process crash or resource consumtion, or potentially have unspecified futher impact. - CVE-2016-8684: Mismatch between real filesize...

openSUSE Security Update : ImageMagick (openSUSE-2016-1242)

This update for ImageMagick fixes the following issues : - CVE-2016-8684: Mismatch between real filesize and header values bsc1005123 - CVE-2016-8683: Check that filesize is reasonable compared to the header value bsc1005127 - CVE-2016-8682: Stack-buffer read overflow while reading SCT header...

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2016:2667-1)

This update for ImageMagick fixes the following issues: These vulnerabilities could be triggered by processing specially crafted image files, which could lead to a process crash or resource consumtion, or potentially have unspecified futher impact. - CVE-2016-8684: Mismatch between real filesize...