20296 matches found
Fedora 18 : xen-4.2.1-3.fc18 (2013-0627)
Update to xen 4.2.1. VT-d interrupt remapping source validation flaw XSA-33,CVE-2012-5634 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...
DEBIAN-CVE-2012-4461
The KVM subsystem in the Linux kernel before 3.6.9, when running on hosts that use qemu userspace without XSAVE, allows local users to cause a denial of service kernel OOPS by using the KVMSETSREGS ioctl to set the X86CR4OSXSAVE bit in the guest cr4 register, then calling the KVMRUN ioctl...
CVE-2012-2372
The rdsibxmit function in net/rds/ibsend.c in the Reliable Datagram Sockets RDS protocol implementation in the Linux kernel 3.7.4 and earlier allows local users to cause a denial of service BUGON and kernel panic by establishing an RDS connection with the source IP address equal to the IPoIB...
CVE-2012-2119
Buffer overflow in the macvtap device driver in the Linux kernel before 3.4.5, when running in certain configurations, allows privileged KVM guest users to cause a denial of service crash via a long descriptor with a long vector length...
CVE-2012-4414
Multiple SQL injection vulnerabilities in the replication code in Oracle MySQL possibly before 5.5.29, and MariaDB 5.1.x through 5.1.62, 5.2.x through 5.2.12, 5.3.x through 5.3.7, and 5.5.x through 5.5.25, allow remote authenticated users to execute arbitrary SQL commands via vectors related to t...
CVE-2012-6096
Multiple stack-based buffer overflows in the gethistory function in history.cgi in Nagios Core before 3.4.4, and Icinga 1.6.x before 1.6.2, 1.7.x before 1.7.4, and 1.8.x before 1.8.4, might allow remote attackers to execute arbitrary code via a long 1 hostname variable host parameter or 2...
CVE-2012-4414
Disclaimer: This data contains information about vulnerable...
CVE-2012-4918
CVE-2012-4918 affects Call of Duty Elite for iOS 2.0.1. The vulnerability is that the app does not properly validate the server’s SSL certificate, enabling a Man-in-the-Middle (MITM) attack and potential exposure of sensitive information. The available documents confirm the root cause (insufficie...
CVE-2012-2137
CVE-2012-2137 describes a buffer overflow in virt/kvm/irq_comm.c within the Linux kernel's KVM subsystem, exploitable by local users on kernel versions before 3.2.24. The flaw enables denial of service (crash) and potentially arbitrary code execution via vectors involving Message Signaled Interru...
CVE-2012-4414
CVE-2012-4414 concerns multiple SQL injection vulnerabilities in the replication code of MySQL/MariaDB. Public details describe remote authenticated access could allow arbitrary SQL execution via the binary log vectors in MySQL versions prior to 5.5.29 and MariaDB 5.1.x–5.1.62, 5.2.x–5.2.12, 5.3....
CVE-2012-3364
CVE-2012-3364 relates to multiple stack-based buffer overflows in the Linux kernel’s Near Field Communication Controller Interface (NCI) before version 3.4.5. The flaw allows remote attackers to crash the system and potentially execute arbitrary code via incoming frames with crafted length fields...
CVE-2012-2372
The rdsibxmit function in net/rds/ibsend.c in the Reliable Datagram Sockets RDS protocol implementation in the Linux kernel 3.7.4 and earlier allows local users to cause a denial of service BUGON and kernel panic by establishing an RDS connection with the source IP address equal to the IPoIB...
CVE-2012-3364
Multiple stack-based buffer overflows in the Near Field Communication Controller Interface NCI in the Linux kernel before 3.4.5 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via incoming frames with crafted length fields...
CVE-2012-2119
Buffer overflow in the macvtap device driver in the Linux kernel before 3.4.5, when running in certain configurations, allows privileged KVM guest users to cause a denial of service crash via a long descriptor with a long vector length...
CVE-2012-5616
CVE-2012-5616 affects Apache CloudStack 4.0.0-incubating and Citrix CloudPlatform prior to 3.0.6, where sensitive data is logged in log4j.conf. This enables local users to obtain (1) SSH private keys from createSSHKeyPair, (2) host passwords from AddHost, and (3)/(4) VM passwords from DeployVM or...
CVE-2012-2372
CVE-2012-2372 affects the Linux kernel (3.7.4 and earlier). The vulnerability is in the rds_ib_xmit function (net/rds/ib_send.c) and can allow local users to cause a denial of service (BUG_ON and kernel panic) by establishing an RDS connection with the source IP equal to the IPoIB interface’s own...
CVE-2012-4461
CVE-2012-4461 overview: The Linux kernel KVM subsystem (pre-3.6.9) on hosts using qemu userspace without XSAVE is vulnerable. A local attacker can trigger a denial of service (kernel OOPS) by calling KVM_SET_SREGS to enable the X86_CR4_OSXSAVE bit in the guest CR4, then issuing KVM_RUN. The conne...
CVE-2012-6096
CVE-2012-6096 describes multiple stack-based buffer overflows in Nagios Core before 3.4.4 and Icinga 1.6.x/1.7.x/1.8.x before respective fixed points, exploitable via a long host_name (host) or svc_description parameter in history.cgi get_history. Evidence in connected docs shows public disclosur...
CVE-2012-2119
CVE-2012-2119 : A buffer overflow in the Linux kernel macvtap device driver (before 3.4.5) can be triggered in certain configurations by a long descriptor with a long vector length, enabling privileged KVM guest users to crash the host (DoS). Affected component: macvtap driver in the Linux kernel...
