Denial Of Service (DoS)

QEMU is vulnerable to denial of service DoS. es1370transferaudio in hw/audio/es1370.c does not properly validate the frame count, which allows guest OS users to trigger an out-of-bounds access during an es1370write operation...

Denial Of Service (DoS)

QEMU is vulnerable to denial of service. An out-of-bounds read in the function megasaslookupframe in hw/scsi/megasas.c allows an attacker to crash the application using a malicious replyqueuehead field from a guest OS user...

Windows Hyper-V Denial of Service Vulnerability

A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on a guest operating system. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a...

The vulnerability of the Google Cloud OS guest-oslogin entry environment, related to incorrect default access permissions settings, allows attackers to escalate their privileges.

The vulnerability of the Google Cloud OS guest-oslogin entry environment is related to incorrect default access settings. Exploiting this vulnerability can allow attackers to increase their privileges...

Information Disclosure

An issue was discovered in xenoprof in Xen through 4.13.x, allowing guest OS users without active profiling to obtain sensitive information about other guests. Unprivileged guests can request to map xenoprof buffers, even if profiling has not been enabled for those guests. These buffers were not...

Arbitrary Code Execution

xen is vulnerable to arbitrary code execution. The vulnerability exists as an issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of service or possibly gain privileges because of missing memory barriers in read-write unlock paths. The read-write unlock paths don...

Arbitrary Code Execution

virglrenderer is vulnerable to arbitrary code execution. A heap-based buffer overflow in the vrendrenderertransferwriteiov function in vrendrenderer.c allows guest OS users to cause a denial of service condition and execute arbitrary code via VIRGLCCMDRESOURCEINLINEWRITE commands...

Denial Of Service (DoS)

virglrenderer is vulnerable to denial of service DoS. The vulnerability exists as an out-of-bounds read in the vrendblitneedswizzle function in vrendrenderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via VIRGLCCMDBLIT commands...

Arbitrary Code Execution

virglrenderer is vulnerable to arbitrary code execution. A heap-based buffer overflow in the vrendrenderertransferwriteiov function in vrendrenderer.c allows guest OS users to cause a denial of service condition and execute arbitrary code via VIRGLCCMDRESOURCEINLINEWRITE commands...

Denial Of Service (DoS)

virglrenderer is vulnerable to denial of service DoS. A NULL pointer dereference in vrendrenderer.c in virglrenderer allows guest OS users to cause a denial of service via malformed commands...

Privilege Escalation

xen is vulnerable to privilege escalation. A guest OS user is able to gain privileges or crash the host OS due to non-atomic modification of a live EPT PTE...

ESXi 6.5 / 6.7 XSS (VMSA-2020-0008)

The remote VMware ESXi host is version 6.5 or 6.7 and is affected by a cross-site scripting XSS vulnerability in virtual machine attributes due to improper validation of user-supplied input before returning it to users. An authenticated, remote attacker with access to modify the system properties...

CVE-2020-15567

An issue was discovered in Xen through 4.13.x, allowing Intel guest OS users to gain privileges or cause a denial of service because of non-atomic modification of a live EPT PTE. When mapping guest EPT nested paging tables, Xen would in some circumstances use a series of non-atomic bitfield write...

CVE-2020-15564

An issue was discovered in Xen through 4.13.x, allowing Arm guest OS users to cause a hypervisor crash because of a missing alignment check in VCPUOPregistervcpuinfo. The hypercall VCPUOPregistervcpuinfo is used by a guest to register a shared region with the hypervisor. The region will be mapped...

CVE-2020-15566

An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a host OS crash because of incorrect error handling in event-channel port allocation. The allocation of an event-channel port may fail for multiple reasons: 1 port is already in use, 2 the memory allocation failed, or...

CVE-2020-15567

An issue was discovered in Xen through 4.13.x, allowing Intel guest OS users to gain privileges or cause a denial of service because of non-atomic modification of a live EPT PTE. When mapping guest EPT nested paging tables, Xen would in some circumstances use a series of non-atomic bitfield write...

CVE-2020-15565

An issue was discovered in Xen through 4.13.x, allowing x86 Intel HVM guest OS users to cause a host OS denial of service or possibly gain privileges because of insufficient cache write-back under VT-d. When page tables are shared between IOMMU and CPU, changes to them require flushing of both...

CVE-2020-15566

An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a host OS crash because of incorrect error handling in event-channel port allocation. The allocation of an event-channel port may fail for multiple reasons: 1 port is already in use, 2 the memory allocation failed, or...

Google Cloud Platform guest-oslogin elevation of privilege vulnerability (CNVD-2020-60516)

Google Cloud Platform is a cloud computing platform that provides cloud computing, data storage, data analytics and machine learning services. guest-oslogin is one of the operating system login components. A security vulnerability exists in guest-oslogin versions 20190304 through 20200507 in Goog...

Google Cloud Platform guest-oslogin elevation of privilege vulnerability

Google Cloud Platform is a cloud computing platform that provides cloud computing, data storage, data analytics and machine learning services. guest-oslogin is one of the operating system login components. A security vulnerability exists in guest-oslogin versions 20190304 through 20200507 in Goog...