Xen Denial of Service Vulnerability (CNVD-2016-01330)

Xen is a virtualization technology developed by the University of Cambridge that can be used in the Linux kernel, allowing multiple operating systems to run simultaneously. A denial of service vulnerability exists in versions prior to Xen 4.6.x that allows HVM guest users to cause a denial of...

How to trigger a memory dump from a Windows virtual machine

This article describes how to trigger and capture a memory dump from a Windows Virtual Machine VM running on a XenServer 8 or Citrix Hypervisor 8.2 CU1 host. Refer to the Microsoft KB article, Generate a kernel or complete crash dump for more information. Troubleshooting unresponsive Windows VMs...

Apache CloudStack Information Disclosure Vulnerability (CNVD-2016-01066)

Apache CloudStack is a suite of open source cloud computing software from the Apache USA Software Foundation. The software can be used to deploy, manage, and configure public and private clouds IaaS. A security vulnerability exists in Apache CloudStack versions 4.5.1 and earlier. A remote attacke...

JDK: J9 JVM allows code to invoke non-public interface methods

The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before SR9 FP30, and 7 R1 before SR3 FP30 allows remote attackers to obtain sensitive information or inject data by invoking non-public interface methods...

JDK: J9 JVM allows code to invoke non-public interface methods

The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before SR9 FP30, and 7 R1 before SR3 FP30 allows remote attackers to obtain sensitive information or inject data by invoking non-public interface methods...

QEMU 'vmxnet3.c' Denial of Service Vulnerability

QEMU is a suite of analog processor software developed by French programmer Fabrice Bellard. A denial of service vulnerability exists in QEMU, which can be exploited by an attacker to cause a QEMU instance to crash, resulting in a denial of service...

The vulnerability of the Oracle Database database management system allows a hacker to execute arbitrary code.

The vulnerability of the Java VM component of the Oracle Database management system is related to errors in the code. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely through network packets...

Multiple Vmware Products VMware Tools HGFS Component Elevation of Privilege Vulnerability

VMware Workstation, VMware Player, and VMware Fusion are virtual machine software; VMware ESXi is a set of server virtualization platforms that can be installed directly on physical servers.VMware Tools HGFS is one of the shared folder components. A security vulnerability exists in the VMware Too...

DEBIAN-CVE-2015-1779

The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service memory and CPU consumption via a large 1 websocket payload or 2 HTTP headers section...

UBUNTU-CVE-2015-8744

QEMU aka Quick Emulator built with a VMWARE VMXNET3 paravirtual NIC emulator support is vulnerable to crash issue. It occurs when a guest sends a Layer-2 packet smaller than 22 bytes. A privileged CAPSYSRAWIO guest user could use this flaw to crash the QEMU process instance resulting in DoS...

IBM B2B Advanced Communications Information Disclosure Vulnerability

IBM B2B Advanced Communication is a communication gateway product from IBM USA. An information disclosure vulnerability exists in IBM B2B Advanced Communications versions 1.0.0.2 and 1.0.0.3. An attacker can exploit the vulnerability to obtain sensitive information in error response messages with...

[SECURITY] Fedora 23 Update: mono-4.0.5-2.fc23

The Mono runtime implements a JIT engine for the ECMA CLI virtual machine as well as a byte code interpreter, the class loader, the garbage collector, threading system and metadata access libraries...

Stop Error "0x0000005D" or "0x000000C4" Appears When Installing Windows Server 2012 in XenServer 6.x

Stop Error "0x0000005D" or "0x000000C4" appears when starting a Virtual Machine from the Windows Server 2012 ISO, in order to install the system. The error occurs right after loading the setup files, before the actual setup starts...

QEMU heap buffer overflow vulnerability (CNVD-2015-08495)

QEMU is a suite of analog processor software. QEMU suffers from a buffer overflow vulnerability that allows an attacker to exploit the vulnerability to corrupt a VM virtual machine image and conduct a denial of service attack...

Xen 'hvm/irq.c' Denial of Service Vulnerability

Xen is an open source virtual machine monitor product developed at the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A denial of service vulnerability...

Damn Vulnerable Node Application: DVNA

Damn Vulnerable Node Application DVNA is a node.js web application that is damn vulnerable. Its main goal is to be an aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of securing web applications and to aid...

Xen Denial of Service Vulnerability (CNVD-2015-08402)

Xen is an open source virtual machine monitor product developed at the University of Cambridge in the United Kingdom. Xen has a security vulnerability that allows an attacker to exploit the vulnerability to crash the host with virtual machine administrator privileges to conduct a denial of servic...

Ubuntu: Security Advisory (USN-2840-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Update Rollup 9 for Microsoft Azure Site Recovery Provider

Describes Update Rollup 8 for Microsoft Azure Site Recovery Provider. Includes a summary of the issues that this rollup fixes.IntroductionThis article describes the fixes that are included in Update Rollup 9 version 5.1.1300 for Microsoft Azure Site Recovery Provider. Learn about the details of t...

RHEV: vdsm spice disable-ticketing and VM suspend and restore allows auth bypass

VDSM and libvirt in Red Hat Enterprise Virtualization Hypervisor aka RHEV-H 7-7.x before 7-7.2-20151119.0 and 6-6.x before 6-6.7-20151117.0 as packaged in Red Hat Enterprise Virtualization before 3.5.6 when VSDM is run with -spice disable-ticketing and a VM is suspended and then restored, allows...