Xen Project XSA-240 Mitigation Shadow Paging Conflict Vulnerability (XSA-280)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by a vulnerability allowing a guest system to potentially elevate privileges, access protected information, and perform a DoS against the host. A number of caveats exist to determine if a...

Xen Project Insufficient TLB Flushing Vulnerability (XSA-275)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by a vulnerability allowing a guest system to potentially elevate privileges, access protected information, and perform a DoS against the host. Only AMD systems with IOMMU enabled are...

Oracle VirtualBox crServerDispatchGenFramebuffersEXT Integer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Oracle VirtualBox. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the...

Oracle VirtualBox crUnpackExtendAreProgramsResidentNV Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of Oracle VirtualBox. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

SUSE-SU-2018:2369-1 Security update for the Linux Kernel (Live Patch 36 for SLE 12)

This update for the Linux Kernel 3.12.61-52136 fixes several issues. The following security issues were fixed: - CVE-2018-3646: Local attackers in virtualized guest systems could use speculative code patterns on hyperthreaded processors to read data present in the L1 Datacache used by other...

VMware Workstation Shader Out-Of-Bounds Write Privilege Escalation Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of VMware Workstation. An attacker must first obtain the ability to execute low-privileged code on the guest system in order to exploit this vulnerability. The specific flaw exists within the Shader...

Ubuntu: Security Advisory (USN-3049-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : libvmtools-devel (openSUSE-SU-2011:0617-1)

This update of open-vm-tools fixes the following vulnerabilities which allowed an attacker to gain root privileges within the guest system : - CVE-2011-1681 - CVE-2011-2146 - CVE-2011-1787 - CVE-2011-2145 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks...

Xen buffer overflow

Buffer overflow on guest system kernel image loading...

VMWare privilege escalation

Privilege escalation in the guest system via LGTOSYNC.SYS...

Scientific Linux Security Update : kvm on SL5.4 x86_64

CVE-2009-3722 KVM: Check cpl before emulating debug register access CVE-2010-0419 kvm: emulator privilege escalation segment selector check A flaw was found in the way the x86 emulator loaded segment selectors used for memory segmentation and protection into segment registers. In some guest syste...

Scientific Linux Security Update : qspice on SL5.x x86_64

It was found that the libspice component of QEMU-KVM on the host did not validate all pointers provided from a guest system's QXL graphics card driver. A privileged guest user could use this flaw to cause the host to dereference an invalid pointer, causing the guest to crash denial of service or,...

DSA-2501-1 xen - several

Bulletin has no description...

VMWare privilege escalation

Uninitialized memory reference on guest system call processing...

DSA-2404-1 xen-qemu-dm-4.0 - buffer overflow

Bulletin has no description...

KVM security vulnerabilities

DoS on guest system I/O processing...

VMWare multiple security vulnerabilities

Privilege escalation in guest system. Directory traversal on access from guest to host system...

VMWare privilege escalation

64-bit platforms guest system privilege escalation...

qemu -- "drive_init()" Disk Format Security Bypass

Secunia reports: A vulnerability has been reported in QEMU, which can be exploited by malicious, local users to bypass certain security restrictions. The vulnerability is caused due to the "driveinit" function in vl.c determining the format of a disk from data contained in the disk's header. This...

CVE-2007-5906

Xen 3.1.1 allows virtual guest system users to cause a denial of service hypervisor crash by using a debug register DR7 to set certain breakpoints...