[SECURITY] Fedora 37 Update: xen-4.16.5-3.fc37

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

Virtual Machines Do Not Start After the Upgrade of XenServer

After an upgrade of XenServer, Virtual Machines VMs will not start with the following error: Error: Starting VM 'Name-of-VM - This operation cannot be performed because the specified VDI could not be found on the storage substrate...

[SECURITY] Fedora 38 Update: xen-4.17.2-4.fc38

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

The vulnerability in the shared usage function of Bluetooth between host devices and virtual machine supervisors by VMware Workstation and VMware Fusion allows attackers to disclose protected information.

The vulnerability of the shared-host device Bluetooth function with VMware Workstation and VMware Fusion virtual machines relates to memory-walking attacks. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by these systems...

BlackCat Incorporates ‘Munchkin’ into Its Arsenal

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary The BlackCat ransomware group has introduced a new tool called Munchkin in its operations. This tool employs virtual machines VMs to stealthily deploy encryptors on network devices. Munchkin allows the...

Fedora: Security Advisory for xen (FEDORA-2023-948136565a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 37 Update: xen-4.16.5-2.fc37

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

DEBIAN-CVE-2023-5366

A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to...

[SECURITY] Fedora 39 Update: xen-4.17.2-2.fc39

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

Fedora: Security Advisory for xen (FEDORA-2023-4125279976)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 38 Update: xen-4.17.2-2.fc38

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

open-vm-tools security update

An update is available for open-vm-tools. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Open Virtual Machine Tools are the open source implementation of th...

Fedora 37 : open-vm-tools (2023-9b1a1023ac)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-9b1a1023ac advisory. Package new upstream version of open-vm-tools-12.3.0-22234872. Security fix for CVE-2023-20900, CVE-2023-20867 Tenable has extracted the preceding...

open-vm-tools: SAML token signature bypass

An improper signature verification flaw was found in open-vm-tools that may lead to a bypass of SAML token signature. A malicious actor that has been granted Guest Operation Privileges in a target virtual machine may be able to elevate their privileges if that target virtual machine has been...

September 12, 2023—KB5030216 (OS Build 20348.1970)

None None...

DEBIAN-CVE-2023-20900

A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a...

Live migration within a pool that doesn't have shared storage by using the xe CLI

To migrate VMs between hosts that do not share storage storage live migration by using the xe CLI, not XenCenter...

The vulnerability of the module related to the software for managing clusters of virtual machines in Kubernetes allows a hacker to increase their privileges.

The vulnerability of the module related to the software for managing clusters of virtual machines in Kubernetes is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

[SECURITY] Fedora 37 Update: xen-4.16.5-1.fc37

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

DEBIAN-CVE-2020-23793

An issue was discovered in spice-server spice-server-0.14.0-6.el76.1.x8664 of Redhat's VDI product. There is a security vulnerablility that can restart KVMvirtual machine without any authorization. It is not yet known if there will be other other effects...