UBUNTU-CVE-2015-8104

The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service host OS panic or hang by triggering many DB aka Debug exceptions, related to svm.c...

USN-2806-1 linux-lts-vivid vulnerability

Ben Serebrin discovered that the KVM hypervisor implementation in the Linux kernel did not properly catch Alignment Check exceptions. An attacker in a guest virtual machine could use this to cause a denial of service system crash in the host OS...

Ubuntu 14.04 LTS : Linux kernel (Utopic HWE) vulnerability (USN-2805-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-2805-1 advisory. Ben Serebrin discovered that the KVM hypervisor implementation in the Linux kernel did not properly catch Alignment Check exceptions. An attacker in a guest virtu...

The vulnerability of the Oracle Database database management system allows a hacker to execute arbitrary code with administrator privileges.

The vulnerability of the Java VM component of the Oracle Database management system is related to errors in the code. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with administrator privileges remotely...

Failed to Create New Virtual Machine Using XenDesktop Setup Wizard

Failed to create new virtual machine using XenDesktop setup wizard. The following error message is displayed: "Unable to access the virtual machine configuration: Unable to access file FILEPATH/FILENAME.vmtx"...

The vulnerability of the Oracle Database database management system allows a hacker to trigger a service failure.

The vulnerability of the Java VM component of the Oracle Database management system is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Xen Denial of Service Vulnerability (CNVD-2015-07245)

Xen is an open source virtual machine monitor product developed at the University of Cambridge in the United Kingdom. A security vulnerability exists in the 'libxlbuildpost' function in the tools/libxl/libxldom.c file and in the 'libxlsetmemory target' functions, due to a security flaw in the...

Xen elevation of privilege vulnerability (CNVD-2015-07060)

Xen is an open source virtual machine that is the foundation for virtualizing cloud computing. An elevation of privilege vulnerability exists in versions prior to Xen 3.4. An attacker can elevate privileges to take control of the entire system, leading to the escape of a virtual machine and posin...

jdk7-openjdk: multiple issues

CVE-2015-4734 information disclosure It was discovered that the JGSS component of OpenJDK did not properly hide Kerberos realm information from all error exceptions when running under Security Manager. An untrusted Java application or applet could use this flaw to obtain certain information about...

jre8-openjdk: multiple issues

CVE-2015-4734 information disclosure It was discovered that the JGSS component of OpenJDK did not properly hide Kerberos realm information from all error exceptions when running under Security Manager. An untrusted Java application or applet could use this flaw to obtain certain information about...

Spice 'surface_id' Heap Overflow Vulnerability

SPICE Simple Protocol for Independent Computing Environments is one of the three main technology components of Red Hat Enterprise Virtualized Desktop Edition, an adaptive remote submission protocol that delivers the exact same end-user experience as a physical desktop. A security vulnerability...

Microsoft Internet Explorer Performance Object Virtual Machine Judgment Vulnerability

Microsoft Internet Explorer is a WEB-based browser. A security vulnerability exists in Microsoft Internet Explorer when calling the 'windows.performance' object, which allows attackers to determine virtual machine information...

Microsoft Edge Performance Object Virtual Machine Judgment Vulnerability

Microsoft Edge is a WEB-based browser. A security vulnerability exists in Microsoft Edge's call to the 'windows.performance' object, which allows attackers to exploit the vulnerability to determine virtual machine information...

[SECURITY] Fedora 22 Update: groovy-2.4.0-2.fc22

Groovy is an agile and dynamic language for the Java Virtual Machine, built upon Java with features inspired by languages like Python, Ruby and Smalltalk. It seamlessly integrates with all existing Java objects and libraries and compiles straight to Java bytecode so you can use it anywhere you ca...

The remote control tool VNC denial of service vulnerability analysis-vulnerability warning-the black bar safety net

Original author: 3 6 0 security guard company account） LR, noirfate Foreword Qemu is a processor simulation software, can provide user-mode simulation and system mode simulation. When in the user mode of the simulation state will be used when dynamic translation technology allows a cpu to build t...

Cisco TelePresence Server Denial of Service Vulnerability (cisco-sa-20150916-tps)

Cisco TelePresence Server contains a buffer overflow vulnerability in the Conference Control Protocol API that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a...

Amazon Linux: Security Advisory (ALAS-2012-88)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

By overflow vulnerability to bypass the antivirus protection-vulnerability warning-the black bar safety net

Ideas By writing a having overflow vulnerability in the program, and the malicious code written into the shellcode, overflow after executing the shellcode can bypass the antivirus protection. Test environment Platform: Windows XP SP3 Compiler: VC 6.0 Test code Construct the following exploit code...

RHEV-M: webadmin automatic logout fails if VM is selected

It was found that the idle timeout in the Red Hat Enterprise Virtualization Manager Web Admin interface failed to log out a session if a VM has been selected in the VM grid view. This could allow a local attacker to access the web interface if it was left unattended...

Moderate: Red Hat Security Advisory: python-django-horizon security and bug fix update

Updated python-django-horizon packages that fix multiple security issues are now available for Red Hat Enterprise Linux OpenStack Platform 6.0. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give...