libvirt / qemu security vulnerabilities

Crash on PCI registers, IDE controller and Physical Region Descriptor Table decoder. Code execution...

[USN-2608-1] QEMU vulnerabilities

========================================================================== Ubuntu Security Notice USN-2608-1 May 13, 2015 qemu, qemu-kvm vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives...

USN-2608-1: QEMU vulnerabilities

Jason Geffner discovered that QEMU incorrectly handled the virtual floppy driver. This issue is known as VENOM. A malicious guest could use this issue to cause a denial of service, or possibly execute arbitrary code on the host as the user running the QEMU process. In the default installation, wh...

kvm security update

kvm-83-272.0.1.el5 - Added kvm-add-oracle-workaround-for-libvirt-bug.patch - Added kvm-Introduce-oel-machine-type.patch kvm-83.272.el5 - kvm-fdc-force-the-fifo-access-to-be-in-bounds-of-the-all.patch bz1219266 - Resolves: bz1219266 kvm: qemu: floppy disk controller flaw rhel-5.11.z...

Ubuntu 14.04 LTS : QEMU vulnerabilities (USN-2608-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2608-1 advisory. Jason Geffner discovered that QEMU incorrectly handled the virtual floppy driver. This issue is known as VENOM. A malicious guest could use this issue to...

The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the libvirt-devel-0.9.10 package on the CentOS operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the libvirt-1.1.1 package on the CentOS operating system can lead to a violation of the confidentiality and accessibility of protected information. This vulnerability can be exploited remotely...

The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the libvirt-daemon-config-nwfilter-1.1.1 package on the CentOS operating system can lead to violations of confidentiality and accessibility of protected information. This vulnerability can be exploited remotely...

The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the libvirt-daemon-driver-secret-1.1.1 package on the CentOS operating system can lead to violations of confidentiality and accessibility of protected information. This vulnerability can be exploited remotely...

The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the libvirt-docs-1.1.1 package on the CentOS operating system can lead to violations of confidentiality and accessibility of protected information. This vulnerability can be exploited remotely...

The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the libvirt-python-0.9.10 package on the CentOS operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the libvirt-daemon-driver-nwfilter-1.1.1 package on the CentOS operating system can lead to a violation of the confidentiality and accessibility of protected information. This vulnerability can be exploited remotely...

The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the libvirt-daemon-driver-storage-1.1.1 package on the CentOS operating system can lead to a violation of the confidentiality and accessibility of protected information. This vulnerability can be exploited remotely...

The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the libvirt-login-shell-1.1.1 package on the CentOS operating system can lead to violations of confidentiality and accessibility of protected information. This vulnerability can be exploited remotely...

The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the libvirt-daemon-driver-network-1.1.1 package on the CentOS operating system can lead to violations of confidentiality and accessibility of protected information. This vulnerability can be exploited remotely...

The vulnerability of the Red Hat Enterprise Linux operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the libvirt-devel-0.8.1 package for the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...

The vulnerability of the Red Hat Enterprise Linux operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the libvirt-devel-0.8.2 package for the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...

Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information

The multiple vulnerabilities in the libvirt package of the Debian GNU/Linux operating system may be exploited, leading to a violation of the accessibility of protected information. The exploitation of these vulnerabilities can be carried out by a malicious actor who has completed the authenticati...

The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the libvirt-lock-sanlock-0.9.10 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

The vulnerability of the OpenSUSE operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the libvirt-client-debuginfo-32bit package on the OpenSUSE operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...