CVE-2024-21164

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.20. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromi...

CVE-2024-21164

CVE-2024-21164 affects Oracle VM VirtualBox (Core) with affected versions prior to 7.0.20. The issue allows a high-privilege attacker who can log on to the host to compromise the VirtualBox instance, potentially leading to unauthorized read access to a subset of data. The vulnerability is part of...

CVE-2024-21161

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.20. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2024-21161

Oracle VM VirtualBox (Core) on Linux hosts is affected by CVE-2024-21161. Affects versions prior to 7.0.20. The vulnerability allows a low-privilege, local attacker with logon to the host to cause a hang or frequent crash (DoS) of VirtualBox. CVSS v3.1 base score is 5.5 (Availability impact); att...

CVE-2024-21141

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2024-21141

CVE-2024-21141 affects Oracle VM VirtualBox (Core) with affected versions prior to 7.0.20. The vulnerability is described as easily exploitable by a high-privileged attacker who can log on to the infrastructure where VirtualBox runs, potentially allowing takeover of VirtualBox and impacting other...

OpenJDK: Range Check Elimination (RCE) pre-loop limit overflow (8320548)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0....

OpenJDK: Out-of-bounds access in 2D image handling (8324559)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1;...

CVE-2021-47623

In the Linux kernel, the following vulnerability has been resolved: powerpc/fixmap: Fix VM debug warning on unmap Unmapping a fixmap entry is done by calling setfixmap with FIXMAPPAGECLEAR as flags. Today, powerpc setfixmap calls mapkernelpage. mapkernelpage is not happy when called a second time...

CVE-2021-47623 powerpc/fixmap: Fix VM debug warning on unmap

In the Linux kernel, the following vulnerability has been resolved: powerpc/fixmap: Fix VM debug warning on unmap Unmapping a fixmap entry is done by calling setfixmap with FIXMAPPAGECLEAR as flags. Today, powerpc setfixmap calls mapkernelpage. mapkernelpage is not happy when called a second time...

CVE-2021-47623 powerpc/fixmap: Fix VM debug warning on unmap

In the Linux kernel, the following vulnerability has been resolved: powerpc/fixmap: Fix VM debug warning on unmap Unmapping a fixmap entry is done by calling setfixmap with FIXMAPPAGECLEAR as flags. Today, powerpc setfixmap calls mapkernelpage. mapkernelpage is not happy when called a second time...

AZL-62848 CVE-2024-41008 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: change vm-taskinfo handling This patch changes the handling and lifecycle of vm-taskinfo object. The major changes are: - vm-taskinfo is a dynamically allocated ptr now, and its uasge is reference counted. - introduci...

DEBIAN-CVE-2024-41008

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: change vm-taskinfo handling This patch changes the handling and lifecycle of vm-taskinfo object. The major changes are: - vm-taskinfo is a dynamically allocated ptr now, and its uasge is reference counted. - introduci...

AZL-68255 CVE-2024-41008 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: change vm-taskinfo handling This patch changes the handling and lifecycle of vm-taskinfo object. The major changes are: - vm-taskinfo is a dynamically allocated ptr now, and its uasge is reference counted. - introduci...

CVE-2024-41008 drm/amdgpu: change vm->task_info handling

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: change vm-taskinfo handling This patch changes the handling and lifecycle of vm-taskinfo object. The major changes are: - vm-taskinfo is a dynamically allocated ptr now, and its uasge is reference counted. - introduci...

PT-2024-25214 · Bluestack Systems · Bluestacks

Name of the Vulnerable Software and Affected Versions: BlueStacks affected versions not specified Description: The issue concerns a privilege escalation through VM backdooring. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

CVE-2024-21174: Allocation of Resources Without Limits or Throttling

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.23, 21.3-21.14 and 23.4. Difficult to exploit vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with network access via Oracle Net to...

CVE-2021-47623: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: powerpc/fixmap: Fix VM debug warning on unmap Unmapping a fixmap entry is done by calling setfixmap with FIXMAPPAGECLEAR as flags. Today, powerpc setfixmap calls mapkernelpage. mapkernelpage is not happy when called a second time...

Hotfix XS82ECU1066 - For Citrix Hypervisor 8.2 Cumulative Update 1

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.2 Cumulative Update 1. All customers who are affected by the issues described in CTX691115 - XenServer and Citrix Hypervisor Security Update for CVE-2024-31143 and CVE-2024-31144 should install this hotfix...

CVE-2024-21164: Out-of-bounds Read

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.20. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromi...