Lucene search
K

5618 matches found

BDU FSTEC
BDU FSTEC
added 2022/05/12 12:0 a.m.5 views

The vulnerability of the Windows Hyper-V hardware virtualization system allows attackers to circumvent existing security restrictions.

The vulnerability of the Windows Hyper-V hardware virtualization system is related to resource release errors. Exploiting this vulnerability can allow an attacker to circumvent existing security restrictions...

6.2CVSS6.4AI score0.00698EPSS
Exploits0References1
NVD
NVD
added 2022/05/11 5:15 p.m.20 views

CVE-2021-46744

An attacker with access to a malicious hypervisor may be able to infer data values used in a SEV guest on AMD CPUs by monitoring ciphertext values over time...

6.5CVSS0.00325EPSS
Exploits0References2
Prion
Prion
added 2022/05/11 5:15 p.m.19 views

Design/Logic Flaw

An attacker with access to a malicious hypervisor may be able to infer data values used in a SEV guest on AMD CPUs by monitoring ciphertext values over time...

2.1CVSS6.3AI score0.00325EPSS
Exploits0References2
Cvelist
Cvelist
added 2022/05/11 4:40 p.m.35 views

CVE-2021-46744

An attacker with access to a malicious hypervisor may be able to infer data values used in a SEV guest on AMD CPUs by monitoring ciphertext values over time...

6.7AI score0.00325EPSS
Exploits0References2
CVE
CVE
added 2022/05/11 4:40 p.m.107 views

CVE-2021-46744

Technical details about CVE-2021-46744 are not publicly provided in the supplied Connected documents. The initial entry mentions a SEV data-inference risk on AMD SEV guests, but no product/version/root-cause/fix is given here. Monitor for updates.

6.5CVSS6.3AI score0.00325EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2022/05/11 12:0 a.m.7 views

PT-2022-2472 · Amd +1 · Amd Cpus +1

Name of the Vulnerable Software and Affected Versions: AMD CPUs affected versions not specified Description: The issue is related to the implementation of the SEV-SNP Secure Nested Paging protective mechanism for virtual machines running on servers with AMD processors, which is associated with da...

9.8CVSS6.3AI score0.74041EPSS
Exploits11References114
Lenovo
Lenovo
added 2022/05/10 9:26 p.m.4 views

Ciphertext Side Channels on AMD SEV - Lenovo Support US

No description provided...

6.8AI score
Exploits0
ATTACKERKB
ATTACKERKB
added 2022/05/10 8:30 p.m.5 views

CVE-2021-46744

An attacker with access to a malicious hypervisor may be able to infer data values used in a SEV guest on AMD CPUs by monitoring ciphertext values over time...

6.5CVSS6.2AI score0.00325EPSS
Exploits0References3
CNNVD
CNNVD
added 2022/05/10 12:0 a.m.5 views

Microsoft Hyper-V 资源管理错误漏洞

Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. A resource management error vulnerability exists in Microsoft Hyper-V. The following products and editions are affected: Windows 10 Version 21H1 f...

5.6CVSS7.7AI score0.00731EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2022/05/09 12:0 a.m.29 views

NewStart CGSL MAIN 4.06 : kernel Multiple Vulnerabilities (NS-SA-2022-0075)

The remote NewStart CGSL host, running version MAIN 4.06, has kernel packages installed that are affected by multiple vulnerabilities: - The offset2lib patch as used by the Linux Kernel contains a vulnerability, if RLIMITSTACK is set to RLIMINFINITY and 1 Gigabyte of memory is allocated the maxim...

9.8CVSS7.2AI score0.06652EPSS
Exploits11References37
Fedora
Fedora
added 2022/05/07 5:1 a.m.143 views

[SECURITY] Fedora 36 Update: xen-4.16.1-1.fc36

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

7.8CVSS2.1AI score0.00344EPSS
Exploits0
Fedora
Fedora
added 2022/05/02 7:30 a.m.48 views

[SECURITY] Fedora 34 Update: xen-4.14.5-1.fc34

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

7.8CVSS2.1AI score0.00344EPSS
Exploits0
CNNVD
CNNVD
added 2022/05/02 12:0 a.m.2 views

Qualcomm 安全漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits including primarily semiconductor devices, but also passive components, etc. and is manufactured from time to time on the surface of semiconductor wafers. A security vulnerability exists in multiple Qualcomm...

9.3CVSS7.3AI score0.00119EPSS
Exploits0References5
OSV
OSV
added 2022/04/24 10:1 p.m.9 views

GSD-2022-1001985 Drivers: hv: vmbus: Fix potential crash on module unload

Drivers: hv: vmbus: Fix potential crash on module unload This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.111 by commit...

7.2AI score
Exploits0
OSV
OSV
added 2022/04/24 9:8 p.m.3 views

GSD-2022-1001369 Drivers: hv: vmbus: Fix potential crash on module unload

Drivers: hv: vmbus: Fix potential crash on module unload This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.20 by commit...

7.2AI score
Exploits0
OSV
OSV
added 2022/04/22 12:24 a.m.4 views

GHSA-HQFX-4X4W-VMWP Openstack nova qcow format could expose host filesystem information

Versions of nova before 2012.1 could expose hypervisor host files to a guest operating system when processing a maliciously constructed qcow filesystem...

2.8CVSS8.5AI score0.00734EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2022/04/22 12:24 a.m.18 views

Openstack nova qcow format could expose host filesystem information

Versions of nova before 2012.1 could expose hypervisor host files to a guest operating system when processing a maliciously constructed qcow filesystem...

8.6CVSS7AI score0.00734EPSS
Exploits0References5Affected Software1
OpenVAS
OpenVAS
added 2022/04/22 12:0 a.m.24 views

Fedora: Security Advisory for xen (FEDORA-2022-dfbf7e2372)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS6.5AI score0.00344EPSS
Exploits0References2
Fedora
Fedora
added 2022/04/21 9:22 p.m.43 views

[SECURITY] Fedora 35 Update: xen-4.15.2-3.fc35

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

7.8CVSS2.1AI score0.00344EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2022/04/19 12:0 a.m.35 views

No memory limit for dom0less domUs (XSA-383)

The dom0less feature allows an administrator to create multiple unprivileged domains directly from Xen. Unfortunately, the memory limit from them is not set. This allows a domain to allocate memory beyond what an administrator originally configured. Note that Nessus has not tested for this issue...

6.8CVSS5.2AI score0.0187EPSS
Exploits0References2
Rows per page
Query Builder