UBUNTU-CVE-2016-9104

Multiple integer overflows in the 1 v9fsxattrread and 2 v9fsxattrwrite functions in hw/9pfs/9p.c in QEMU aka Quick Emulator allow local guest OS administrators to cause a denial of service QEMU process crash via a crafted offset, which triggers an out-of-bounds access...

SUSE-SU-2016:2507-1 Security update for xen

This update for xen fixes several issues. These security issues were fixed: - CVE-2016-7092: The getpagefroml3e function in arch/x86/mm.c in Xen allowed local 32-bit PV guest OS administrators to gain host OS privileges via vectors related to L3 recursive pagetables bsc995785 - CVE-2016-7093: Xen...

CVE-2016-7909

The pcnetrdraaddr function in hw/net/pcnet.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service infinite loop and QEMU process crash by setting the 1 receive or 2 transmit descriptor ring length to 0...

DEBIAN-CVE-2016-7909

The pcnetrdraaddr function in hw/net/pcnet.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service infinite loop and QEMU process crash by setting the 1 receive or 2 transmit descriptor ring length to 0...

CVE-2016-7094

Buffer overflow in Xen 4.7.x and earlier allows local x86 HVM guest OS administrators on guests running with shadow paging to cause a denial of service via a pagetable update...

UBUNTU-CVE-2016-7093

Xen 4.5.3, 4.6.3, and 4.7.x allow local HVM guest OS administrators to overwrite hypervisor memory and consequently gain host OS privileges by leveraging mishandling of instruction pointer truncation during emulation...

DEBIAN-CVE-2016-6351

The espdodma function in hw/scsi/esp.c in QEMU aka Quick Emulator, when built with ESP/NCR53C9x controller emulation support, allows local guest OS administrators to cause a denial of service out-of-bounds write and QEMU process crash or execute arbitrary code on the QEMU host via vectors involvi...

DEBIAN-CVE-2016-5106

The megasasdcmdsetproperties function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest administrators to cause a denial of service out-of-bounds write access via vectors involving a MegaRAID Firmware Interface MFI command...

SUSE-SU-2016:1764-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP1 Realtime kernel was updated to 3.12.58 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2015-7566: The treoattach function in drivers/usb/serial/visor.c in the Linux kernel allowed physically proximate attackers to cause a...

Lenovo ThinkPad BIOS System Management Mode Arbitrary Code Execution Vulnerability

BIOS Basic Input/Output System i.e. Basic Output Input System is the most basic software code loaded on the computer hardware system. The Lenovo ThinkPad BIOS has a security vulnerability that can be exploited by an attacker with local administrative access to execute arbitrary code, disable flas...

Microsoft Windows Assisted Login Privilege Elevation Vulnerability (CNVD-2016-02248)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Secondary Logon Service is one of the secondary logon services. An elevation of privilege vulnerability exists in the Secondary Logon Service service in Microsoft Windows 10 Gold and 1511, which stems...

Unitronics VisiLogic OPLC IDE vlp File Parsing Heap Buffer Overflow (CVE-2015-7939)

A heap buffer overflow vulnerability exists in Unitronics VisiLogic OPLC IDE. The vulnerability is due to errors parsing VisiLogic project files. A remote attacker could exploit this vulnerability by enticing a vulnerable user to open a crafted web page or file. Successful exploitation could lead...

Seemingly tasteless ESPCMS background injected, can actually be a lot of fun-vulnerability warning-the black bar safety net

Yesterday, the black bar safety net loophole platform exposes a ESPCMS of injection vulnerabilities, Ali cloud computing security attack and defense against a team of friends first time on the vulnerability to do an impact assessment. Did not think need to login to the backend before it can be...

How to Configure Device Certificate on Citrix Gateway for Authentication

Adevice certificateverifies that a user device is allowed to connect to the internal network. NetScaler Gateway supports device certificates that enable you to bind the device identity to a public key. Notes : You must install NetScaler Gateway 10.1, Build 120.1316.e or later or 10.5.e.x or 10.5....

CVE-2015-7835

The modl2entry function in arch/x86/mm.c in Xen 3.4 through 4.6.x does not properly validate level 2 page table entries, which allows local PV guest administrators to gain privileges via a crafted superpage mapping...

CVE-2015-5742

VeeamVixProxy in Veeam Backup & Replication B&R before 8.0 update 3 stores local administrator credentials in log files with world-readable permissions, which allows local users to obtain sensitive information by reading the files...

Veeam Backup & Replication Local Privilege Escalation Vulnerability

Veeam Backup & Replication Local Privilege Escalation Vulnerability Name Sensitive Data Exposure in Veem Backup Systems Affected Veeam Backup & Replication B&R v6, v6.5, v7, v8 Severity High 7.9/10 Impact CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L Vendor http://www.veeam.com/ Advisory...

Veeam Backup And Replication 6 / 7 / 8 Privilege Escalation

Veeam Backup & Replication Local Privilege Escalation Vulnerability Name Sensitive Data Exposure in Veem Backup Systems Affected Veeam Backup & Replication B&R v6, v6.5, v7, v8 Severity High 7.9/10 Impact CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L Vendor http://www.veeam.com/ Advisory...

HP Operations Manager i Management Pack for SAP Elevation of Privilege Vulnerability

HP Operations is a decentralized client/service software product for managing decentralized environments. A security vulnerability exists in HP Operations Manager i Management Pack for SAP that allows a local SAP administrative user to execute system commands on the system with elevated privilege...

Backup Service Will Not Start Due To Group Policy

Challenge The Veeam Backup Service starts and then immediately stops. Svc.VeeamBackup.log contains errors such as: Error Unable to acquire privilege 'SeBackupPrivilege'. Error Unable to acquire privilege 'SeRestorePrivilege'. Cause According to the Required Permissions page of the user guide, the...