4735 matches found
DEBIAN-CVE-2016-7170
The vmsvgafiforun function in hw/display/vmwarevga.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service out-of-bounds write and QEMU process crash via vectors related to cursor.mask and cursor.image array sizes when processing a DEFINECURSOR svga command...
FreeBSD : FreeBSD -- bhyve(8) virtual machine escape (e722e3c6-bbee-11e6-b1cf-14dae9d210b8)
The bounds checking of accesses to guest memory greater than 4GB by device emulations is subject to integer overflow. Impact : For a bhyve virtual machine with more than 3GB of guest memory configured, a malicious guest could craft device descriptors that could give it access to the heap of the...
FreeBSD bhyve(8) Integer Overflow Vulnerability
bhyve, the FreeBSD hypervisor/virtual machine manager, reports the "POPCNT" POPulation Count processor feature in bhyve8. An integer overflow vulnerability exists in FreeBSD bhyve8. As the bhyve8 virtual machine is configured with more than 3GB of client memory, this could allow a malicious clien...
CVE-2016-9637
An out of bounds array access issue was found in the Xen virtual machine monitor, built with the QEMU ioport support. It could occur while doing ioport read/write operations, if guest was to supply a 32bit address parameter. A privileged guest user/process could use this flaw to potentially...
FreeBSD-SA-16:38.bhyve
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-16:38.bhyve Security Advisory The FreeBSD Project Topic: bhyve8 virtual machine escape Category: core Module: bhyve Announced: 2016-12-06 Credits: Felix Wilhelm...
FreeBSD -- bhyve(8) virtual machine escape
Problem Description: The bounds checking of accesses to guest memory greater than 4GB by device emulations is subject to integer overflow. Impact: For a bhyve virtual machine with more than 3GB of guest memory configured, a malicious guest could craft device descriptors that could give it access ...
PT-2016-3112 Ā· LinuxĀ +2 Ā· Linux KernelĀ +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.8.13 Description: The issue is related to a use-after-free vulnerability in the kvm ioctl create device function. This vulnerability can be exploited by host OS users to cause a denial of service, resulting in...
Xen elevation of privilege vulnerability (CNVD-2016-11705)
Xen is an open source virtual machine monitor product developed at the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. Xen has an elevation of privilege...
Xen elevation of privilege vulnerability (CNVD-2016-11703)
Xen is an open source virtual machine monitor product developed at the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. Xen suffers from an elevation of...
libguestfs, lua, ocaml, perl, python, ruby, virt security update
CentOS Errata and Security Advisory CESA-2016:2576 An update for libguestfs and virt-p2v is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a...
Metasploitable3 - An Intentionally Vulnerable Machine for Exploit Testing
Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities. It is intended to be used as a target for testing exploits with metasploit . Metasploitable3 is released under a BSD-style license. See COPYING for more details. Building Metasploitable 3...
Xen elevation of privilege vulnerability (CNVD-2016-11648)
Xen is an open source virtual machine monitor product developed at the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. Xen suffers from an elevation of...
Teradata Virtual Machine Community Edition 15.0 Insecure File Creation Vulnerability
Teradata Virtual Machine Community Edition version 15.10 suffers from an insecure creation of files in /tmp that may lead to elevated code execution. Title: Teradata Virtual Machine Community Edition v15.10 Insecure creation of files in /tmp Author: Larry W. Cashdollar, @larry0 Date: 2016-10-01...
Intentionally Vulnerable Machine for Exploit Testing: Metasploitable3
Intentionally Vulnerable Machine for Exploit Testing Metasploitable3 is a free virtual machine that allows you to simulate attacks largely using Metasploit. It has been used by people in the security industry for a variety of reasons: such as training for network exploitation, exploit development...
Teradata Virtual Machine Community Edition 15.0 Insecure File Creation
Title: Teradata Virtual Machine Community Edition v15.10 Insecure creation of files in /tmp Author: Larry W. Cashdollar, @larry0 Date: 2016-10-01 Download Site: http://downloads.teradata.com/download/database/teradata-virtual-machine-community-edition-for-vmware Vendor: Teradata Vendor Notified:...
VMware Patches Virtual Machine Escape Vulnerability
VMware quickly turned around a patch for a critical code execution flaw that was worth $150,000 to the researchers who found it. While there have been no reported public exploits, the vulnerability is serious because it could allow an attacker to access a virtual instance and run code on the host...
Teradata Virtual Machine Community Edition Code Execution Vulnerability
Teradata Virtual Machine Community Edition is a Teradata virtual container packaged with the SUSE Linux Enterprise Server SLES operating system and Teradata databases to run in a virtualized environment on third-party hardware. A code execution vulnerability exists in Teradata Virtual Machine...
Teradata Virtual Machine Community Edition Elevation of Privilege Vulnerability
Teradata Virtual Machine Community Edition is a Teradata virtual container packaged with the SUSE Linux Enterprise Server SLES operating system and Teradata databases to run in a virtualized environment on third-party hardware. A security vulnerability exists in Teradata Virtual Machine Community...
Teradata Virtual Machine Community Edition 15.10 Insecure File Permission
Title: Teradata Virtual Machine Community Edition v15.10 has insecure file permission Author: Larry W. Cashdollar, @larry0 Date: 2016-10-01 Download Site: http://downloads.teradata.com/download/database/teradata-virtual-machine-community-edition-for-vmware Vendor: Teradata Vendor Notified:...