6034 matches found
PT-2023-13502 · Intel · Intel Sps Firmware
Name of the Vulnerable Software and Affected Versions: IntelR SPS firmware versions prior to SPS E3 06.00.03.300.0 Description: The issue is related to an improper condition check in the IntelR SPS firmware, which may allow a privileged user to potentially enable denial of service via local acces...
PT-2023-12971 · Intel · Integrated Bmc
Name of the Vulnerable Software and Affected Versions: Integrated BMC versions prior to 2.86 Integrated BMC versions prior to 2.09 Integrated BMC versions prior to 2.78 Description: The issue is related to an uncaught exception in the webserver for the Integrated BMC in some IntelR platforms, whi...
PT-2023-13005 · Intel · Intel Integrated Sensor Solution
Name of the Vulnerable Software and Affected Versions: IntelR Integrated Sensor Solution versions prior to 5.4.2.4579v3 IntelR Integrated Sensor Solution versions prior to 5.4.1.4479 IntelR Integrated Sensor Solution versions prior to 5.0.0.4143 Description: The issue is an out-of-bounds read in...
SUSE CVE-2012-6538
The copytouserauth function in net/xfrm/xfrmuser.c in the Linux kernel before 3.6 uses an incorrect C library function for copying a string, which allows local users to obtain sensitive information from kernel heap memory by leveraging the CAPNETADMIN capability...
SUSE CVE-2015-8743
QEMU aka Quick Emulator built with the NE2000 device emulation support is vulnerable to an OOB r/w access issue. It could occur while performing 'ioport' r/w operations. A privileged CAPSYSRAWIO user/process could use this flaw to leak or corrupt QEMU memory bytes...
SUSE CVE-2016-1714
The 1 fwcfgwrite and 2 fwcfgread functions in hw/nvram/fwcfg.c in QEMU before 2.4, when built with the Firmware Configuration device emulation support, allow guest OS users with the CAPSYSRAWIO privilege to cause a denial of service out-of-bounds read or write access and process crash or possibly...
SUSE CVE-2017-3538
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Shared Folder. Supported versions that are affected are Prior to 5.0.34 and Prior to 5.1.16. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle V...
SUSE CVE-2017-3575
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM...
SUSE CVE-2017-3630
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris...
SUSE CVE-2017-5579
Memory leak in the serialexitcore function in hw/char/serial.c in QEMU aka Quick Emulator allows local guest OS privileged users to cause a denial of service host memory consumption and QEMU process crash via a large number of device unplug operations...
SUSE CVE-2017-5987
The sdhcisdmatransfermultiblocks function in hw/sd/sdhci.c in QEMU aka Quick Emulator allows local OS guest privileged users to cause a denial of service infinite loop and QEMU process crash via vectors involving the transfer mode register during multi block transfer...
SUSE CVE-2017-8086
Memory leak in the v9fslistxattr function in hw/9pfs/9p-xattr.c in QEMU aka Quick Emulator allows local guest OS privileged users to cause a denial of service memory consumption via vectors involving the origvalue variable...
SUSE CVE-2017-8379
Memory leak in the keyboard input event handlers support in QEMU aka Quick Emulator allows local guest OS privileged users to cause a denial of service host memory consumption by rapidly generating large keyboard events...
SUSE CVE-2017-9374
Memory leak in QEMU aka Quick Emulator, when built with USB EHCI Emulation support, allows local guest OS privileged users to cause a denial of service memory consumption by repeatedly hot-unplugging the device...
SUSE CVE-2017-9375
QEMU aka Quick Emulator, when built with USB xHCI controller emulator support, allows local guest OS privileged users to cause a denial of service infinite recursive call via vectors involving control transfer descriptors sequencing...
SUSE CVE-2017-10239
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...
SUSE CVE-2017-13672
QEMU aka Quick Emulator, when built with the VGA display emulator support, allows local guest OS privileged users to cause a denial of service out-of-bounds read and QEMU process crash via vectors involving display update...
SUSE CVE-2017-15121
A non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an application punches a hole in a file that does not end aligned to a page boundary...
SUSE CVE-2017-15289
The mode4and5 write functions in hw/display/cirrusvga.c in Qemu allow local OS guest privileged users to cause a denial of service out-of-bounds write access and Qemu process crash via vectors related to dst calculation...