DSA-2607-1 qemu-kvm - buffer overflow

Bulletin has no description...

DEBIAN-CVE-2012-6035

The dotmemdestroypool function in the Transcendent Memory TMEM in Xen 4.0, 4.1, and 4.2 does not properly validate pool ids, which allows local guest OS users to cause a denial of service memory corruption and host crash or execute arbitrary code via unspecified vectors. NOTE: this issue was...

kernel: thp: __split_huge_page() mapcount != page_mapcount BUG_ON()

The Linux kernel before 3.3.1, when KVM is used, allows guest OS users to cause a denial of service host OS crash by leveraging administrative access to the guest OS, related to the pmdnoneorclearbad function and page faults for huge pages...

qemu: e1000: process_tx_desc legacy mode packets heap overflow

Heap-based buffer overflow in the processtxdesc function in the e1000 emulation hw/e1000.c in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service QEMU crash and possibly execute arbitrary code via crafted legacy mode packets...

PT-2012-2263 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.2.14 Description: The issue allows guest OS users to cause a denial of service, resulting in a guest OS crash, by utilizing a crafted application. This is due to the em syscall function in arch/x86/kvm/emulate...

Changed block tracking cannot be enabled: virtual hardware version 7 or later required

Challenge The backup or replication job is processed slower than expected and gives the warning message "changed block tracking cannot be enabled: virtual hardware version 7 or later required." The job works without Changed Block Tracking, and the "changed block tracking cannot be enabled: virtua...

PT-2011-3665 · Libvirt · Libvirt

Name of the Vulnerable Software and Affected Versions: libvirt versions 0.8.8 through 0.9.1 Description: The issue is related to the virSecurityManagerGetPrivateData function in security/security manager.c, which incorrectly processes "security manager private data" due to a wrong argument used i...

DEBIAN-CVE-2011-2145

mount.vmhgfs in the VMware Host Guest File System HGFS in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi 3.5 through 4.1, and VMware ESX 3.0.3 through 4.1, when a Solaris or FreeBSD guest OS is used, allows guest OS users to...

CVE-2011-2146

mount.vmhgfs in the VMware Host Guest File System HGFS in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi 3.5 through 4.1, and VMware ESX 3.0.3 through 4.1 allows guest OS users to determine the existence of host OS files and...

VMware Fusion < 3.1.3 (VMSA-2011-0009 / VMSA-2011-0011)

The version of VMware Fusion installed on the Mac OS X host is earlier than 3.1.3. As such, it is reportedly affected by the following three security vulnerabilities : - An attacker with access to a Guest operating system can determine if a path exists in the Host filesystem and whether it's a fi...

PT-2010-2484 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.26 Description: The issue allows remote attackers to cause a denial of service, resulting in a guest OS crash and an associated qemu-kvm process exit. This is achieved by sending a large amount of network...

CORE-2009-0803: Virtual PC Hypervisor Memory Protection Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Virtual PC Hypervisor Memory Protection Vulnerability 1. Advisory Information Title: Virtual PC Hypervisor Memory Protection Vulnerability Advisory Id: CORE-2009-0803...

Linux Kernel 2.6.x - KVM pit_ioport_read() Local Denial of Service

Linux Kernel 2.6.x - KVM pitioportread Local Denial of Service source: https://www.securityfocus.com/bid/38038/info The Linux kernel is prone to a local denial-of-service vulnerability that affects the Kernel-based Virtual Machine KVM. Attackers with local access to a guest operating system can...

PT-2009-6214 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.32-rc8-next-20091125 Description: The issue is related to the x86 emulator in the KVM subsystem of the Linux kernel. It allows guest OS users to cause a denial of service, specifically increased scheduling...

Microsoft Virtual PC/Server Privilege Escalation Vulnerability (969856)

This host is missing a critical security update according to Microsoft Bulletin MS09-033. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

kernel: xen: local denial of service

The hypervisorcallback function in Xen, possibly before 3.4.0, as applied to the Linux kernel 2.6.30-rc4, 2.6.18, and probably other versions allows guest user applications to cause a denial of service kernel oops of the guest OS by triggering a segmentation fault in "certain address ranges."...

VMSA-2009-0006:VMware Hosted products and patches for ESX and ESXi resolve a CRITICAL security vulnerability

VMSA-2009-0006 VMware Hosted products and patches for ESX and ESXi resolve a critical security vulnerability VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0006 VMware Security Advisory Synopsis: VMware Hosted products and patches for ESX and ESXi resolve a critical...

VMSA-2009-0005:VMware Hosted products, VI Client and patches for ESX and ESXi resolve multiple security issues

VMSA-2009-0005 VMware Hosted products, VI Client and patches for ESX and ESXi resolve multiple security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0005 VMware Security Advisory Synopsis: VMware Hosted products, VI Client and patches for ESX and ESXi resolve...

Mandrake Security Advisory MDVSA-2009:016 (xen)

The remote host is missing an update to xen announced via advisory MDVSA-2009:016. OpenVAS Vulnerability Test $Id: mdksa2009016.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:016 xen Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

VMware Products Multiple Vulnerabilities (VMSA-2008-0018/VMSA-2008-0019)

A VMware product installed on the remote host is affected by multiple vulnerabilities : - A CPU hardware emulation flaw in certain VMware products could allow a virtual CPU to incorrectly handle a Trap flag. Successful exploitation of this issue could lead to privilege escalation on the guest...