Xen Hypervisor Privilege Escalation

The vulnerability of component mm.c arch/x86/mm.c in the Xen hypervisor and the XenServer server virtualization platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating locally, to enhance their privileges by using functions related t...

Xen Hypervisor Function Privilege Escalation

The vulnerability of the xenbiovecphysmergeable function in the biomerge.c driver driver/xen/biomerge.c in the Xen hypervisor and XenServer server virtualization platform is related to deficiencies in access control for certain functions. Exploiting this vulnerability can allow an attacker to...

[SECURITY] [DSA 3969-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3969-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 12, 2017 https://www.debian.org/security/faq -...

ALPINE-CVE-2017-14316

A parameter verification issue was discovered in Xen through 4.9.x. The function allocheappages allows callers to specify the first NUMA node that should be used for allocations through the memflags parameter; the node is extracted using the MEMFgetnode macro. While the function checks to see if...

DEBIAN-CVE-2017-14318

An issue was discovered in Xen 4.5.x through 4.9.x. The function gnttabcacheflush handles GNTTABOPcacheflush grant table operations. It checks to see if the calling domain is the owner of the page that is to be operated on. If it is not, the owner's grant table is checked to see if a grant mappin...

insufficient grant unmapping checks for x86 PV guests

ISSUE DESCRIPTION When removing or replacing a grant mapping, the x86 PV specific path needs to make sure page table entries remain in sync with other accounting done. Although the identity of the page frame was validated correctly, neither the presence of the mapping nor page writability were...

CVE-2017-12223

A vulnerability in the ROM Monitor ROMMON code of Cisco IR800 Integrated Services Router Software could allow an unauthenticated, local attacker to boot an unsigned Hypervisor on an affected device and compromise the integrity of the system. The vulnerability is due to insufficient sanitization o...

Design/Logic Flaw

A vulnerability in the ROM Monitor ROMMON code of Cisco IR800 Integrated Services Router Software could allow an unauthenticated, local attacker to boot an unsigned Hypervisor on an affected device and compromise the integrity of the system. The vulnerability is due to insufficient sanitization o...

CVE-2017-12223

A vulnerability in the ROM Monitor ROMMON code of Cisco IR800 Integrated Services Router Software could allow an unauthenticated, local attacker to boot an unsigned Hypervisor on an affected device and compromise the integrity of the system. The vulnerability is due to insufficient sanitization o...

CVE-2017-12223: Improper Input Validation

A vulnerability in the ROM Monitor ROMMON code of Cisco IR800 Integrated Services Router Software could allow an unauthenticated, local attacker to boot an unsigned Hypervisor on an affected device and compromise the integrity of the system. The vulnerability is due to insufficient sanitization o...

PT-2017-12414

Name of the Vulnerable Software and Affected Versions Cisco IR800 Integrated Services Router Software affected versions not specified Description A vulnerability in the ROM Monitor ROMMON code could allow an unauthenticated, local attacker to compromise the integrity of the system by booting an...

Cisco IR800 Integrated Services Router ROM Monitor Input Validation Vulnerability

A vulnerability in the ROM Monitor ROMMON code of Cisco IR800 Integrated Services Router Software could allow an unauthenticated, local attacker to boot an unsigned Hypervisor on an affected device and compromise the integrity of the system. The vulnerability is due to insufficient sanitization o...

[SECURITY] Fedora 27 Update: xen-4.9.0-9.fc27

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

[SECURITY] Fedora 26 Update: xen-4.8.1-8.fc26

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

Xen Hypervisor Function Error Condition Handling Lock Release Failure Guest-to-Host DoS (XSA-235)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by flaw in the xenmemaddtophysmapone function in arch/arm/mm.c that is triggered as the application fails to release a lock when handling certain error conditions. This may allow a privilege...

[SECURITY] Fedora 26 Update: xen-4.8.1-7.fc26

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

FAQ: NetScaler SD-WAN Center and Hardware Requirements

Question: Is It Possible to Increase the Cores and RAM of an Existing SD-WAN Center VM? Answer: Yes it is possible to increase the cores and RAM of an existing SD-WAN Center VM. If the hypervisor has sufficient resources shutdown the SD-WAN Center instance and increase the Cores and RAM to the...

Hyper-V OS Code Execution

The vulnerability of the Hyper-V operating system’s hypervisor exists due to insufficient validation of input data by the privileged user during guest mode. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

[SECURITY] Fedora 26 Update: xen-4.8.1-6.fc26

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

Google Android Qualcomm Component Unauthorized Operation Vulnerability (CNVD-2017-26919)

Android is a Linux-based open-source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm closed-source components are among the closed-source components developed by Qualcomm. A security vulnerability exists in the Qualcomm closed-source component in Android, whi...