8983 matches found
Apple OS X VM Object Memory Misreference Vulnerability
Apple OS X is an operating system developed by Apple Inc. Apple OS X suffers from a memory misreference vulnerability in the handling of VM objects, which allows attackers to exploit the vulnerability to execute arbitrary code with system privileges...
CVE-2015-7078
Use-after-free vulnerability in Hypervisor in Apple OS X before 10.11.2 allows local users to gain privileges via vectors involving VM objects...
Design/Logic Flaw
Use-after-free vulnerability in Hypervisor in Apple OS X before 10.11.2 allows local users to gain privileges via vectors involving VM objects...
CVE-2015-7078
CVE-2015-7078 is a use-after-free vulnerability in the Apple OS X Hypervisor before 10.11.2. The issue stems from a use-after-free in the hypervisor driver when handling VM objects, enabling a local attacker to gain kernel/privilege level access. Affected product: OS X (pre-10.11.2) . Impact per ...
CVE-2015-7078
Use-after-free vulnerability in Hypervisor in Apple OS X before 10.11.2 allows local users to gain privileges via vectors involving VM objects...
Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
Updated kernel packages that fix three security issues, several bugs, and one enhancement are now available for Red Hat Enterprise Linux 7.1 Extended Update Support. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base...
Citrix XenServer Security Update for CVE-2015-8339 & CVE-2015-8340 (CTX203451)
A security vulnerability has been identified in Citrix XenServer that may allow a malicious administrator of a guest VM to crash the XenServer host. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...
VM does not meet the requirements for storage snapshot based jobs
Challenge A task utilizing storage snapshot integration fails with any of the following errors: VM does not meet requirements for storage snapshot based jobs: its virtual disks are not located on supported storage VM does not meet requirements for storage snapshot based jobs: its files are locate...
Bohatei - Flexible and Elastic DDoS Defense
Bohatei is a first of its kind platform that enables flexible and elastic DDoS defense using SDN and NFV. The repository contains a first version of the components described in the Bohatei paper, as well as a web-based User Interface. The backend folder consists of : an implementation of the...
Citrix XenServer Security Update for CVE-2015-5307 and CVE-2015-8104 (CTX202583)
A security vulnerability has been identified in Citrix XenServer that may allow a malicious administrator of an HVM guest VM to crash the host. This vulnerability affects all currently supported versions of Citrix XenServer up to and including Citrix XenServer 6.5 Service Pack 1...
open-vm-tools: insecure temporary file creation
vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, allows local users to write to arbitrary files via a symlink attack on a file in /tmp...
open-vm-tools: vm-support's diagnostics archive created with world-readable permissions
vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, uses 0644 permissions for the vm-support archive, which allows local users to obtain sensitive information by extracting files from this archive...
Low: Red Hat Bug Fix Advisory: open-vm-tools bug fix and enhancement update
Updated open-vm-tools packages that fix several bugs and add various enhancements are now available for Red Hat Enterprise Linux 7. The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization components that enhanc...
qemu -- denial of service vulnerability in Q35 chipset emulation
Prasad J Pandit, Red Hat Product Security Team, reports: Qemu emulator built with the Q35 chipset based pc system emulator is vulnerable to a heap based buffer overflow. It occurs during VM guest migration, as more16 bytes data is moved into allocated 8 bytes memory area. A privileged guest user...
Palo Alto Networks Panorama VM Appliance Arbitrary Code Execution Vulnerability
Palo Alto Networks Panorama VM Appliance is a solution from Palo Alto Networks, Inc. that supports the use of Panorama as a virtual appliance to manage distributed firewall networks through a central location. An arbitrary code execution vulnerability exists in the Palo Alto Networks Panorama VM...
The vulnerability of the Oracle VM VirtualBox virtual machine, which allows a hacker to trigger a service failure
The vulnerability of Oracle VM VirtualBox is related to errors in its code. Exploiting this vulnerability could allow an attacker, operating locally, to cause a service failure when Windows is used as the guest operating system...
Oracle VirtualBox Multiple Unspecified Vulnerabilities-01 (Nov 2015) - Windows
Oracle VirtualBox is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Oracle VirtualBox Multiple Unspecified Vulnerabilities-01 (Nov 2015) - Linux
Oracle VirtualBox is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
“Broken days”: the Xen virtualization platform virtual machine escape vulnerability analysis-vulnerability warning-the black bar safety net
Xen is the leading open source virtualization platform, supporting the Amazon cloud, Ali cloud, etc. many well-known public cloud service infrastructure, therefore, ensure that the virtualization infrastructure security has important significance. Ali cloud security vulnerability research team...
