The vulnerability of the xen_failsafe_callback function in Xen hypervisors allows a malicious actor to trigger a service failure or increase their privileges.

The vulnerability of the xenfailsafecallback function in Xen hypervisors is related to deficiencies in access control. Exploiting this vulnerability could allow a attacker running on a guest OS to cause service failures or increase their privileges...

The vulnerability of the Core component of the Oracle VM VirtualBox allows a malicious attacker from the guest operating system to execute certain commands or copy data from the host operating system.

The vulnerability of the Core hypervisor component in Oracle VM VirtualBox is related to access control deficiencies. Exploiting this vulnerability allows a malicious individual operating locally on the guest operating system to execute certain commands or copy data from the guest operating syste...

Xen Guest Destruction Memory Leak DoS (XSA-207)

According to its self-reported version number, the Xen hypervisor installed on the remote host is missing a security update. It is, therefore, affected by a memory leak issue due to improper cleanup during guest destruction. A guest attacker can exploit this issue, via frequent rebooting, to...

Xen CMPXCHG8B Emulation Information Disclosure (XSA-200)

According to its self-reported version number, the Xen hypervisor installed on the remote host is missing a security update. It is, therefore, affected by an information disclosure vulnerability due to a flaw in the x86 instruction CMPXCHG8B when handling prefixes. This is triggered because legac...

The vulnerability of the QEMU hardware emulation software, which allows a hacker to trigger a service failure

The vulnerability of the v9fsdeviceunrealizecommon function hw/9pfs/9p.c in the QEMU hardware emulation software is related to a memory leak. Exploiting this vulnerability allows an attacker, who operates locally and is also a user of the guest operating system, to cause a service failure such as...

Citrix XenServer Multiple Vulnerabilities (CTX218775)

The version of Citrix XenServer running on the remote host is missing a security hotfix. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in the sniffnetware function within file tools/pygrub/src/pygrub when handling string quotes and S-expressions in the bootloader whenev...

The vulnerability of the VMware ESXi hypervisor allows a malicious individual to increase their privileges in the guest operating system or cause a service failure.

The vulnerability of VMware ESXi allows a malicious actor operating on the guest OS Windows 8.1 to trigger a service failure in the guest OS or increase their privileges...

UBUNTU-CVE-2016-4441

The getcmd function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller FSC support in QEMU does not properly check DMA length, which allows local guest OS administrators to cause a denial of service out-of-bounds write and QEMU process crash via unspecified vectors, involving an SCSI command...

USN-2807-1 linux-lts-wily vulnerability

Ben Serebrin discovered that the KVM hypervisor implementation in the Linux kernel did not properly catch Alignment Check exceptions. An attacker in a guest virtual machine could use this to cause a denial of service system crash in the host OS...

USN-2801-1 linux vulnerability

Ben Serebrin discovered that the KVM hypervisor implementation in the Linux kernel did not properly catch Alignment Check exceptions. An attacker in a guest virtual machine could use this to cause a denial of service system crash in the host OS...

USN-1008-3: libvirt update

USN-1008-1 fixed vulnerabilities in libvirt. The update for Ubuntu 10.04 LTS reverted a recent bug fix update. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that libvirt would probe disk backing stores without consulting the define...