The vulnerability of the QEMU hardware emulation software allows a hacker to cause an unexpected termination of the application.

The vulnerability of the Virtio GPU emulation software in QEMU is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a local attacker to cause the application to terminate abnormally due to a file rename and execution...

The vulnerability of the QEMU hardware emulation software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the Virtio GPU emulation software in QEMU is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a local attacker to compromise data confidentiality, integrity, and accessibility...

The vulnerability of the QEMU hardware emulation software allows attackers to enhance their privileges, cause service failures, or gain access to protected information.

The vulnerability of the QEMU hardware emulation software is related to lack of access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges, cause service failures, or gain access to protected information using a guest operating system...

The vulnerability of the QEMU hardware emulation software allows a hacker to trigger a maintenance failure or execute arbitrary code.

The vulnerability in the hw/ide/ahci.c driver of the QEMU hardware emulation software is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to cause a service failure or execute arbitrary code crash due to an incorrect AHCI Native Command Queuin...

The vulnerability of the QEMU hardware emulation software allows a hacker to trigger a service failure or cause some other unknown effect.

The vulnerability of the QEMU hardware emulation software is related to incorrect restrictions on commands received from ATAPI devices. Exploiting this vulnerability can allow a malicious actor to cause service failures or potentially have other unspecified effects by using certain IDE commands...

The vulnerability of the QEMU hardware emulation software allows a hacker to trigger a maintenance failure or execute arbitrary code.

The vulnerability of the ne2000receive function in the QEMU hardware emulation software is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability can allow an attacker acting locally to cause a service failure or execute arbitrary code...

The vulnerability of the QEMU hardware emulation software allows a hacker to execute any code on the host operating system.

The vulnerability of the pitioportread function in the QEMU hardware emulation software is caused by buffer overflow. Exploiting this vulnerability allows a local attacker to execute arbitrary code on the host operating system...

The vulnerability of the QEMU hardware emulation software allows a hacker to execute arbitrary code.

The vulnerability of the QEMU hardware emulation software arises from an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending specially crafted packets containing the TXSTATUSSTARTPACKET and TXSTATUSDEVICEOWNS fields...

Guest effectable page reference leak in MMU_MACHPHYS_UPDATE handling

ISSUE DESCRIPTION An error handling path in the processing of MMUMACHPHYSUPDATE failed to drop a page reference which was acquired in an earlier processing step. IMPACT Malicious or buggy stub domain kernels or tool stacks otherwise living outside of Domain0 can mount a denial of service attack...

DEBIAN-CVE-2014-8594

The dommuupdate function in arch/x86/mm.c in Xen 4.x through 4.4.x does not properly restrict updates to only PV page tables, which allows remote PV guests to cause a denial of service NULL pointer dereference by leveraging hardware emulation services for HVM guests using Hardware Assisted Paging...

CVE-2014-8594

The dommuupdate function in arch/x86/mm.c in Xen 4.x through 4.4.x does not properly restrict updates to only PV page tables, which allows remote PV guests to cause a denial of service NULL pointer dereference by leveraging hardware emulation services for HVM guests using Hardware Assisted Paging...

CVE-2014-8594

The dommuupdate function in arch/x86/mm.c in Xen 4.x through 4.4.x does not properly restrict updates to only PV page tables, which allows remote PV guests to cause a denial of service NULL pointer dereference by leveraging hardware emulation services for HVM guests using Hardware Assisted Paging...

CVE-2014-8594

The dommuupdate function in arch/x86/mm.c in Xen 4.x through 4.4.x does not properly restrict updates to only PV page tables, which allows remote PV guests to cause a denial of service NULL pointer dereference by leveraging hardware emulation services for HVM guests using Hardware Assisted Paging...

Null pointer dereference

The dommuupdate function in arch/x86/mm.c in Xen 4.x through 4.4.x does not properly restrict updates to only PV page tables, which allows remote PV guests to cause a denial of service NULL pointer dereference by leveraging hardware emulation services for HVM guests using Hardware Assisted Paging...

CVE-2014-8594

CVE-2014-8594 affects Xen 4.x up to 4.4.x (Xen hypervisor) where do_mmu_update in arch/x86/mm.c does not properly restrict updates to PV page tables. This enables remote PV guests to trigger a denial of service via a NULL pointer dereference by leveraging hardware emulation services for HVM guest...

Insufficient restrictions on certain MMU update hypercalls

ISSUE DESCRIPTION MMU update operations targeting page tables are intended to be used on PV guests only. The lack of a respective check made it possible for such operations to access certain function pointers which remain NULL when the target guest is using Hardware Assisted Paging HAP. IMPACT...

VMware Products Trap Flag In-Guest Privilege Escalation Vulnerability (Linux)

The host is installed with VMWare products that are vulnerable to privilege escalation vulnerability. OpenVAS Vulnerability Test $Id: gbvmwareprdtsinguestprvescvulnlin.nasl 6539 2017-07-05 12:02:14Z cfischer $ VMware Products Trap Flag In-Guest Privilege Escalation Vulnerability Linux Authors:...

VMware Products Trap Flag In-Guest Privilege Escalation Vulnerability (VMSA-2008-0018) - Windows

VMWare products are prone to a privilege escalation vulnerability. Copyright C 2008 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License version 2 or any later...

VMware Products Trap Flag In-Guest Privilege Escalation Vulnerability (VMSA-2008-0018) - Linux

VMWare products are prone to a privilege escalation vulnerability. Copyright C 2008 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License version 2 or any later...

CVE-2008-4915

CVE-2008-4915 documents a privilege-escalation flaw in CPU hardware emulation across VMware products (Workstation, Player, Server, ESX/ESXi, and related variants) when running 32/64-bit guest OS. The trap-flag handling flaw allows an authenticated guest OS user to gain privileges on the guest OS....