EulerOS Virtualization 3.0.2.0 : rpm (EulerOS-SA-2021-2823)

According to the versions of the rpm packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a...

EulerOS Virtualization 3.0.2.0 : util-linux (EulerOS-SA-2021-2829)

According to the versions of the util-linux packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - DISPUTED An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to...

EulerOS Virtualization 3.0.2.0 : libgcrypt (EulerOS-SA-2021-2836)

According to the versions of the libgcrypt package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a...

EulerOS Virtualization 3.0.2.0 : nettle (EulerOS-SA-2021-2838)

According to the versions of the nettle packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this fl...

EulerOS Virtualization 3.0.2.0 : gd (EulerOS-SA-2021-2850)

According to the versions of the gd package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - DISPUTED gdImageGd2Ptr in gdgd2.c in the GD Graphics Library aka LibGD through 2.3.2 has a double free. NOTE: the vendor's position is...

EulerOS Virtualization 3.0.2.0 : python (EulerOS-SA-2021-2825)

According to the versions of the python packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, wh...

EulerOS Virtualization 3.0.2.0 : c-ares (EulerOS-SA-2021-2841)

According to the versions of the c-ares package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS Domain Name Servers can...

EulerOS Virtualization 3.0.2.0 : avahi (EulerOS-SA-2021-2835)

According to the versions of the avahi packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avah...

EulerOS Virtualization 3.0.2.0 : hivex (EulerOS-SA-2021-2822)

According to the versions of the hivex packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted Windows Registry hive file, which...

EulerOS Virtualization 3.0.2.0 : libvirt (EulerOS-SA-2021-2847)

According to the versions of the libvirt packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels. This flaw allows one exploite...

EulerOS Virtualization 3.0.2.0 : python-pillow (EulerOS-SA-2021-2843)

According to the versions of the python-pillow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service ReDoS via the getrgb...

Hyper-V Hardware Virtualization Code Execution

The vulnerability of the Hyper-V hardware virtualization technology for Windows operating systems is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

GSD-2021-1002716 xen/blkfront: harden blkfront against event channel storms

xen/blkfront: harden blkfront against event channel storms This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.88 by commit...

GSD-2021-1002628 xen/netfront: harden netfront against event channel storms

xen/netfront: harden netfront against event channel storms This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.294 by commit...

UBUNTU-CVE-2021-3929

A DMA reentrancy issue was found in the NVM Express Controller NVME emulation in QEMU. This CVE is similar to CVE-2021-3750 and, just like it, when the reentrancy write triggers the reset function nvmectrlreset, data structs will be freed leading to a use-after-free issue. A malicious guest could...

RLSA-2021:5238 Low: virt:rhel and virt-devel:rhel security update

Kernel-based Virtual Machine KVM offers a full virtualization solution for Linux on numerous hardware platforms. The virt:Rocky Linux module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting wi...

UAS emulation device QEMU Heap Buffer Overflow DoS

The vulnerability of the UAS emulation device’s hardware emulation software, QEMU, lies in the lack of flow number verification. Exploiting this vulnerability allows attackers to access confidential data, compromise its integrity, and even cause service failures...

PT-2021-8125 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The vulnerability is related to the KVM component of the Linux kernel. It is caused by the incorrect handling of the vmx-fail flag when the vCPU is in L2 and emulation required is true...

Debian DLA-2843-1 : linux - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2843 advisory. - Use-after-free vulnerability in the Linux kernel exploitable by a local attacker due to reuse of a DCCP socket with an attached dccpshctxccid object as a listene...

FSLogix Automated Control Software Unauthorized Access

The vulnerability of the FSLogix automated desktop virtualization control software lies in the lack of protection for service data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to the device...