287 matches found
Security Bulletin:Venom qemu vulnerability affects PowerKVM (CVE-2015-3456)
Summary PowerKVM is vulnerable to Venom: Virtualized Environment Neglected Operation Manipulation". Vulnerability Details CVEID: CVE-2015-3456 DESCRIPTION: QEMU is vulnerable to a buffer overflow, caused by improper bounds checking by the Floppy Disk Controller FDC emulation. By sending specially...
Security Bulletin: PowerKVM is affected by glibc vulnerabilities (Multiple CVEs)
Summary PowerKVM is affected by multiple glibc vulnerabilities. Vulnerability Details CVEID: CVE-2014-6040 DESCRIPTION: The GNU C Library glibc is vulnerable to a denial of service, caused by the improper validation of input by the iconv function when converting IBM933, IBM935, IBM937, IBM939 or...
Security Bulletin: PowerKVM is affected by ppc64-diag and powerpc-utils vulnerabilities (Multiple CVEs)
Summary PowerKVM is affected by multiple vulnerabilities in ppc64-diag and powerpc-utils. Vulnerability Details CVEID: CVE-2014-4038 DESCRIPTION: ppc64-diag could allow a local attacker to launch a symlink attack. lpdelatest.sh creates temporary files insecurely. A local attacker could exploit th...
Security Bulletin: PowerKVM is affected by a libxml2 vulnerability (CVE-2014-0191)
Summary PowerKVM is affected by libxml vulnerability CVE-2014-0191. Vulnerability Details CVEID: CVE-2014-0191 DESCRIPTION: Libxml2 is vulnerable to a denial of service, caused by the expansion of internal entities within the xmlParserHandlePEReference function. A remote attacker could exploit th...
Security Bulletin: PowerKVM is affected by freetype vulnerabilities (Multiple CVEs)
Summary PowerKVM is affected by multiple freetype vulnerabilities. Vulnerability Details CVEID: CVE-2014-9657 DESCRIPTION: FreeType is vulnerable to a denial of service, caused by an out-of-bounds read in the ttfaceloadhdmx function. A remote attacker could exploit this vulnerability using...
Security Bulletin: PowerKVM is affected by flac vulnerabilities (Multiple CVEs)
Summary PowerKVM is affected by multiple flac vulnerabilities. Vulnerability Details CVEID: CVE-2014-8962 DESCRIPTION: The libFLAC library, which is used to process FLAC Free Lossless Audio Codec files is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by...
Security Bulletin: PowerKVM is affected by a Qemu vulnerability (CVE-2015-1779)
Summary PowerKVM is vulnerable to Qemu vulnerability CVE-2015-1779. Vulnerability Details CVEID: CVE-2015-1779 DESCRIPTION: QEMU is vulnerable to a denial of service, caused by an error when processing incoming frames by the websocket frame decoder. A remote attacker from within the local network...
Security Bulletin: Multiple Kernel vulnerabilities affect PowerKVM (Multiple CVEs)
Summary PowerKVM is affected by several vulnerabilities in the Linux Kernel. Vulnerability Details CVEID: CVE-2014-9644 DESCRIPTION: Linux Kernel could allow a local attacker to bypass security restrictions, caused by an error in the in the Crypto API. An attacker could exploit this vulnerability...
Security Bulletin: Multiple Unzip vulnerabilities affect PowerKVM (Multiple CVEs)
Summary PowerKVM is affected by several vulnerabilities in OpenSSL. Vulnerability Details CVEID: CVE-2014-8139 DESCRIPTION: Info-ZIP UnZip is vulnerable to a heap-based buffer overflow, caused by improper bounds checking within the CRC32 verification. A lo CVSS Base Score: 4.4 CVSS Temporal Score...
Security Bulletin: Vulnerabilities in OpenSSL affect PowerKVM (Multiple CVEs)
Summary OpenSSL vulnerabilities were disclosed on March 19, 2015 by the OpenSSL Project. OpenSSL is used by PowerKVM. PowerKVM has addressed the applicable CVEs Vulnerability Details CVEID: CVE-2015-0209 DESCRIPTION: OpenSSL could allow a remote attacker to execute arbitrary code on the system,...
Security Bulletin: Multiple Kerberos (krb5) vulnerabilities affect PowerKVM (Multiple CVEs)
Summary PowerKVM is affected by several vulnerabilities in Kerberos krb5. Vulnerability Details CVEID: CVE-2014-5352 DESCRIPTION: MIT krb5 could allow a remote authenticated attacker to execute arbitrary code on the system,, caused by a double-free error in gssprocesscontexttoken. An attacker cou...
IBM PowerKVM Local Command Execution Vulnerability
IBM PowerKVM is a set of open virtualization solutions from the U.S. company IBM designed for the Power extension function of Linux servers based on POWER8 technology. The solution supports the sharing of physical computer memory and I/O resources, etc. through server virtualization. A local...
IBM PowerKVM Command Execution Vulnerability
IBM PowerKVM is a set of open virtualization solutions from the U.S. company IBM designed for the Power extension function of Linux servers based on POWER8 technology. The solution supports the sharing of physical computer memory and I/O resources, etc. through server virtualization. A command...
CVE-2016-3044
The Linux kernel component in IBM PowerKVM 2.1 before 2.1.1.3-65.10 and 3.1 before 3.1.0.2 allows guest OS users to cause a denial of service host OS infinite loop and hang via unspecified vectors...
CVE-2016-3044
The Linux kernel component in IBM PowerKVM 2.1 before 2.1.1.3-65.10 and 3.1 before 3.1.0.2 allows guest OS users to cause a denial of service host OS infinite loop and hang via unspecified vectors...
DEBIAN-CVE-2016-3044
The Linux kernel component in IBM PowerKVM 2.1 before 2.1.1.3-65.10 and 3.1 before 3.1.0.2 allows guest OS users to cause a denial of service host OS infinite loop and hang via unspecified vectors...
CVE-2016-3044
The Linux kernel component in IBM PowerKVM 2.1 before 2.1.1.3-65.10 and 3.1 before 3.1.0.2 allows guest OS users to cause a denial of service host OS infinite loop and hang via unspecified vectors...
CVE-2016-3044
The Linux kernel component in IBM PowerKVM 2.1 before 2.1.1.3-65.10 and 3.1 before 3.1.0.2 allows guest OS users to cause a denial of service host OS infinite loop and hang via unspecified vectors...
Design/Logic Flaw
The Linux kernel component in IBM PowerKVM 2.1 before 2.1.1.3-65.10 and 3.1 before 3.1.0.2 allows guest OS users to cause a denial of service host OS infinite loop and hang via unspecified vectors...
UBUNTU-CVE-2016-3044
The Linux kernel component in IBM PowerKVM 2.1 before 2.1.1.3-65.10 and 3.1 before 3.1.0.2 allows guest OS users to cause a denial of service host OS infinite loop and hang via unspecified vectors...