The vulnerability of Xen hypervisors allows a perpetrator to gain privileges necessary to disable blocking devices.

The vulnerability of the QEMU hypervisor component in Xen is related to deficiencies in access control for certain functions. Exploiting this vulnerability can allow an attacker, operating locally, to gain privileges necessary to disable block devices...

Ubuntu 14.04 LTS : QEMU vulnerabilities (USN-2724-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2724-1 advisory. It was discovered that QEMU incorrectly handled a PRDT with zero complete sectors in the IDE functionality. A malicious guest could possibly use this iss...

[SECURITY] Fedora 22 Update: nbd-3.11-1.fc22

Tools for the Linux Kernel's network block device, allowing you to use remote block devices over a TCP/IP network...

[SECURITY] Fedora 21 Update: nbd-3.11-1.fc21

Tools for the Linux Kernel's network block device, allowing you to use remote block devices over a TCP/IP network...

Fedora 22 : xfsprogs-3.2.2-2.fc22 (2015-12435)

Gabriel Vlasiu reported that xfsmetadump, part of the xfsprogs suite of tools for the XFS filesystem, did not properly obfuscate data. xfsmetadump properly obfuscates active metadata, but the rest of the space within that fs block comes through in the clear. This could lead to exposure of stale...

CVE-2015-5166

Use-after-free vulnerability in QEMU in Xen 4.5.x and earlier does not completely unplug emulated block devices, which allows local HVM guest users to gain privileges by unplugging a block device twice...

Design/Logic Flaw

Use-after-free vulnerability in QEMU in Xen 4.5.x and earlier does not completely unplug emulated block devices, which allows local HVM guest users to gain privileges by unplugging a block device twice...

CVE-2015-5166

Use-after-free vulnerability in QEMU in Xen 4.5.x and earlier does not completely unplug emulated block devices, which allows local HVM guest users to gain privileges by unplugging a block device twice...

CVE-2015-5166

Use-after-free vulnerability in QEMU in Xen 4.5.x and earlier does not completely unplug emulated block devices, which allows local HVM guest users to gain privileges by unplugging a block device twice...

SUSE-SU-2015:0270-1 Security update for util-linux

util-linux was updated to fix one security issue. This security issue was fixed: - CVE-2014-9114: Using crafted block devices e.g. USB sticks it was possibly to inject code via libblkid. libblkid was fixed to care about unsafe chars and possible buffer overflow in cache bnc907434 This non-securit...

[SECURITY] Fedora 20 Update: lsyncd-2.1.4-4.fc20.1

Lsyncd watches a local directory trees event monitor interface inotify. It aggregates and combines events for a few seconds and then spawns one or more processes to synchronize the changes. By default this is rsync. Lsyncd is thus a light-weight live mirror solution that is comparatively easy to...

CVE-2014-3471

Use-after-free vulnerability in hw/pci/pcie.c in QEMU aka Quick Emulator allows local guest OS users to cause a denial of service QEMU instance crash via hotplug and hotunplug operations of Virtio block devices...

Debian Security Advisory DSA 2872-1 (udisks - several vulnerabilities)

Florian Weimer discovered a buffer overflow in udisks's mount path parsing code which may result in privilege escalation. OpenVAS Vulnerability Test $Id: deb2872.nasl 6735 2017-07-17 09:56:49Z teissa $ Auto-generated from advisory DSA 2872-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone...

[SECURITY] Fedora 18 Update: nbd-3.5-1.fc18

Tools for the Linux Kernel's network block device, allowing you to use remote block devices over a TCP/IP network...

[SECURITY] Fedora 19 Update: nbd-3.5-1.fc19

Tools for the Linux Kernel's network block device, allowing you to use remote block devices over a TCP/IP network...

Cisco Unified IP Phone 8900/9900 Series Insecure File Permissions Vulnerability

A vulnerability in Cisco Unified IP Phone 9951, Cisco Unified IP Phone 9971, and Cisco Unified IP Phone 8961 could allow an authenticated, local attacker to fully compromise the affected device. The vulnerability is due to insecure file permissions on memory block devices. An attacker could explo...

CVE-2013-6685

The firmware on Cisco Unified IP phones 8961, 9951, and 9971 uses weak permissions for memory block devices, which allows local users to gain privileges by mounting a device with a setuid file in its filesystem, aka Bug ID CSCui04382...

kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2013:1436 Updated kernel packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring Syst...

Moderate: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

[SECURITY] Fedora 19 Update: schroot-1.4.25-13.fc19

schroot allows users to execute commands or interactive shells in different chroots. Any number of named chroots may be created, and access permissions given to each, including root access for normal users, on a per-user or per-group basis. Additionally, schroot can switch to a different user in...