[SECURITY] [DLA 689-1] qemu-kvm security update

Package : qemu-kvm Version : 1.1.2+dfsg-6+deb7u18 CVE ID : CVE-2016-7909 CVE-2016-8909 CVE-2016-8910 Debian Bug : 839834 841950 841955 842455 842463 Multiple vulnerabilities have been discovered in qemu-kvm, a full virtualization solution on x86 hardware based on Quick EmulatorQemu. The Common...

openSUSE Security Update : Chromium (openSUSE-2016-1080)

Chromium was updated to 53.0.2785.101 to fix a number of security issues and bugs. The following vulnerabilities were fixed: boo996648 - CVE-2016-5147: Universal XSS in Blink. - CVE-2016-5148: Universal XSS in Blink. - CVE-2016-5149: Script injection in extensions. - CVE-2016-5150: Use after free...

Mac OS X 10.11.x < 10.11.5 Multiple Vulnerabilities

Binary data 9392.prm...

The vulnerability of the Mac OS X operating system allows a perpetrator to execute arbitrary code in privileged context or cause a service failure.

The vulnerability of the AMD subsystem in the Mac OS X operating system arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context, or trigger a service failure memory corruption through a specially created application...

The vulnerability of the Mac OS X operating system allows a perpetrator to gain access to protected information in the kernel’s memory.

The vulnerability of the AMD subsystem of the Mac OS X operating system is related to the lack of protection for system data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to protected information in the kernel’s memory through a specially created...

Apple OS X El Capitan AMD Arbitrary Code Execution Vulnerability

Apple OS X El Capitan is an operating system on Apple devices. A security vulnerability in AMD in Apple OS X El Capitan allows attackers to exploit the vulnerability to execute arbitrary code with kernel privileges...

CVE-2016-1792

The AMD subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

Memory corruption

The AMD subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

Memory corruption

The AMD subsystem in Apple OS X before 10.11.5 allows attackers to obtain sensitive kernel memory-layout information via a crafted app...

CVE-2016-1791

The AMD subsystem in Apple OS X before 10.11.5 allows attackers to obtain sensitive kernel memory-layout information via a crafted app...

CVE-2016-1792

CVE-2016-1792 affects OS X El Capitan (AMD subsystem). The vulnerability allows an attacker to execute arbitrary code with kernel privileges or cause a memory corruption issue via a crafted app. Apple’s security content for OS X El Capitan v10.11.5 (Security Update 2016-003) addresses this with a...

CVE-2016-1791

CVE-2016-1791 concerns the AMD subsystem in macOS OS X El Capitan . The vulnerability could allow an attacker to disclose sensitive information about the kernel memory layout via a crafted app, potentially aiding further exploitation. Apple’s security content indicates this was addressed in OS X ...

CVE-2016-1792

The AMD subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

Mac OS X 10.11.x < 10.11.5 Multiple Vulnerabilities

The remote host is running a version of Mac OS X that is 10.11.x prior to 10.11.5. It is, therefore, affected by multiple vulnerabilities in the following components : - AMD - apachemodphp - AppleGraphicsControl - AppleGraphicsPowerManagement - Assistant - ATS - Audio - Captive - CFNetwork -...

Mac OS X 10.9.5 / 10.10.5 Multiple Vulnerabilities (Security Update 2016-003)

The remote host is running a version of Mac OS X that is 10.9.5 or 10.10.5 and is missing Security Update 2016-003. It is, therefore, affected by multiple vulnerabilities in the following components : - AMD - Captive Network Assistant - libxml2 - libxslt - OpenGL Note that successful exploitation...

About the security content of OS X El Capitan v10.11.5 and Security Update 2016-003

About the security content of OS X El Capitan v10.11.5 and Security Update 2016-003 This document describes the security content of OS X El Capitan v10.11.5 and Security Update 2016-003. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full...

Fedora 22 : xen-4.5.3-1.fc22 (2016-5f196e4e4a)

update to 4.5.3 ---- broken AMD FPU FIP/FDP/FOP leak workaround XSA-172, CVE-2016-3158, CVE-2016-3159 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

community.amd.com XSS vulnerability

Vulnerable URL: https://community.amd.com/tags?tags=%22%3E%3C/option%3E%3C%20/select%3E%3Cbody/onpageshow=prompt%28%29%3E%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...

Xen Information Disclosure Vulnerability (CNVD-2016-01947)

Xen is an open source virtual machine monitor product developed at the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. An information disclosure...

broken AMD FPU FIP/FDP/FOP leak workaround

ISSUE DESCRIPTION There is a workaround in Xen to deal with the fact that AMD CPUs don't load the x86 registers FIP and possibly FCS, FDP and possibly FDS, and FOP from memory via XRSTOR or FXRSTOR when there is no pending unmasked exception. See XSA-52. However, this workaround does not cover al...