Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2020-1396)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

April 2020 Patch Tuesday – 113 Vulns, 19 Critical, Zero-Day Patches, SharePoint, Adobe ColdFusion

This month’s Microsoft Patch Tuesday addresses 113 vulnerabilities with 19 of them labeled as Critical. The 19 Critical vulnerabilities cover Adobe Font Manager Library 0-day, SharePoint, Hyper-V, Scripting Engines, Media Foundation, Microsoft Graphics, Windows Codecs, and Dynamics Business...

DEBIAN-CVE-2020-11741

An issue was discovered in xenoprof in Xen through 4.13.x, allowing guest OS users with active profiling to obtain sensitive information about other guests, cause a denial of service, or possibly gain privileges. For guests for which "active" profiling was enabled by the administrator, the xenopr...

DEBIAN-CVE-2020-11739

An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of service or possibly gain privileges because of missing memory barriers in read-write unlock paths. The read-write unlock paths don't contain a memory barrier. On Arm, this means a processor is allowed to...

CVE-2020-11742

An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of service because of bad continuation handling in GNTTABOPcopy. Grant table operations are expected to return 0 for success, and a negative number for errors. The fix for CVE-2017-12135 introduced a path...

Citrix Hypervisor Multiple Security Updates

Description of Problem Several issues have been identified within Citrix Hypervisor, which could, if exploited, allow: privileged code in a PV guest VM to read a single uninitialized 4kB page of memory that may contain data left by a previous VM privileged code in a guest VM to cause the host to...

PT-2020-6034

Name of the Vulnerable Software and Affected Versions Xen versions through 4.13.x Description The issue is related to errors in return values of the GNTTABOP map grant component in the Xen hypervisor. Exploitation of this issue can allow an attacker to cause a denial of service. The problem arise...

Xen Hypervisor Command Set Data Compromise

The vulnerability of Xen hypervisors is related to a reliability domain error that may allow access to physical devices. Exploiting this vulnerability can enable attackers to gain access to confidential data, compromise its integrity, and cause service failures...

Xen Hypervisor Synchronization Data Compromise

The vulnerability of Xen hypervisors is related to an error in the restart operations for volume change operations. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Xen Hypervisor Privilege Escalation

The vulnerability of Xen hypervisors exists due to insufficient checking of input data. Exploiting this vulnerability can allow attackers to cause service failures or increase their privileges...

Xen Hypervisor Buffer Overflow DoS

The vulnerabilities of the functions p2mresolvetranslationfault and p2mgetentry in the Xen hypervisor are related to incorrect checks on the root table. Exploitation of these vulnerabilities can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause servi...

Xen Hypercall Initialise DoS

The vulnerability of the hypercallinitialise function in Xen hypervisors is related to incorrect error handling for the invalid format symbol. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Xen Hypervisor Permission Misconfiguration

The vulnerability of Xen hypervisors is related to the occurrence of exceptions that are handled without modifying the processor’s level. Some interrupts are inevitably included when an exception is generated. Exploiting this vulnerability can allow a remote attacker to access confidential data,...

Xen Hypervisor DoS

The vulnerability of Xen hypervisors exists due to insufficient checking of input data. Exploiting this vulnerability can allow attackers to cause service failures...

Xen Privilege Management DoS

The vulnerability of Xen hypervisors is related to an emulation error in PV x86, where there is no check for the limit on the descriptor table. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

Xen Hypervisor DoS

The vulnerability of Xen hypervisors is related to an error in the VMX VMEntry function, which does not handle certain cases correctly. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Xen Hypervisor Loop DoS

The vulnerability of Xen hypervisors is related to incorrect processing of bits during iterations. Exploiting this vulnerability can allow an attacker to cause a service failure...

Xen Hypervisor Input Validation

The vulnerability of Xen hypervisors relates to the dynamic adaptation of the number of page levels in the IOMMU, in accordance with the size of the address space of the user. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists as a flaw in the Xen hypervisor IOMMU error handling implementation could allow a privileged guest user, within a guest operating system that has direct control of a PCI device, to cause performance degradation on the host an...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. A flaw was found in the way the Linux kernel's KVM hypervisor implementation emulated the syscall instruction for 32-bit guests. An unprivileged guest user could trigger this flaw to crash the guest...