9289 matches found
x86: Incorrect handling of IST settings during CPU hotplug
ISSUE DESCRIPTION The x86-64 architecture allows interrupts to be run on distinct stacks. The choice of stack is encoded in a field of the corresponding interrupt descriptor in the Interrupt Descriptor Table IDT. That field selects an entry from the active Task State Segment TSS. Since, on AMD...
CVE-2017-14431
Memory leak in Xen 3.3 through 4.8.x allows guest OS users to cause a denial of service ARM or x86 AMD host OS memory consumption by continually rebooting, because certain cleanup is skipped if no pass-through device was ever assigned, aka XSA-207...
CVE-2017-14431
Memory leak in Xen 3.3 through 4.8.x allows guest OS users to cause a denial of service ARM or x86 AMD host OS memory consumption by continually rebooting, because certain cleanup is skipped if no pass-through device was ever assigned, aka XSA-207...
CVE-2017-14431
Memory leak in Xen 3.3 through 4.8.x allows guest OS users to cause a denial of service ARM or x86 AMD host OS memory consumption by continually rebooting, because certain cleanup is skipped if no pass-through device was ever assigned, aka XSA-207...
CVE-2017-14431
CVE-2017-14431 concerns the Xen hypervisor memory leak (versions 3.3â4.8.x). The issue occurs when destroying a guest without pass-through devices, causing the cleanup to be skipped and leading to host memory consumption and potential DoS (XSA-207). Public details in the connected docs describe t...
PT-2017-13475
Name of the Vulnerable Software and Affected Versions Xen versions 3.3 through 4.8.x Description A memory leak issue allows guest OS users to cause a denial of service by continually rebooting, resulting in ARM or x86 AMD host OS memory consumption. This occurs because certain cleanup is skipped ...
CVE-2017-14431: Missing Release of Resource after Effective Lifetime
Memory leak in Xen 3.3 through 4.8.x allows guest OS users to cause a denial of service ARM or x86 AMD host OS memory consumption by continually rebooting, because certain cleanup is skipped if no pass-through device was ever assigned, aka XSA-207...
openSUSE Security Update : the Linux Kernel (openSUSE-2017-930)
The openSUSE Leap 42.3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2017-1000111: Fixed a race condition in net-packet code that could be exploited to cause out-of-bounds memory access bsc1052365. - CVE-2017-1000112: Fixed a race...
Security update for the Linux Kernel (important)
The openSUSE Leap 42.3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-1000111: Fixed a race condition in net-packet code that could be exploited to cause out-of-bounds memory access bsc1052365. - CVE-2017-1000112: Fixed a race...
Security update for the Linux Kernel (important)
The openSUSE Leap 42.2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-1000111: Fixed a race condition in net-packet code that could be exploited to cause out-of-bounds memory access bsc1052365. - CVE-2017-1000112: Fixed a race...
kernel: Incorrectly mapped contents of PIE executable
The Linux Kernel running on AMD64 systems will sometimes map the contents of PIE executable, the heap or ld.so to where the stack is mapped allowing attackers to more easily manipulate the stack. Linux Kernel version 4.11.5 is affected...
UBUNTU-CVE-2017-8932
A bug in the standard library ScalarMult implementation of curve P-256 for amd64 architectures in Go before 1.7.6 and 1.8.x before 1.8.2 causes incorrect results to be generated for specific input points. An adaptive attack can be mounted to progressively extract the scalar input to ScalarMult by...
June 13, 2017âKB4022719 (Monthly Rollup)
None None...
June 13, 2017âKB4022726 (Monthly Rollup)
None None...
kernel: Incorrectly mapped contents of PIE executable
The Linux Kernel running on AMD64 systems will sometimes map the contents of PIE executable, the heap or ld.so to where the stack is mapped allowing attackers to more easily manipulate the stack. Linux Kernel version 4.11.5 is affected...
kernel: Incorrectly mapped contents of PIE executable
The Linux Kernel running on AMD64 systems will sometimes map the contents of PIE executable, the heap or ld.so to where the stack is mapped allowing attackers to more easily manipulate the stack. Linux Kernel version 4.11.5 is affected...
shop.amd.com XSS vulnerability
Vulnerable URL: http://shop.amd.com/en-gb?FollowSite=0=%27-confirm'OPENBUGBOUNTY'-%27 Details: Description| Value ---|--- Patched:| Yes, at 26.11.2017 Latest check for patch:| 26.11.2017 14:56 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2135 VIP website...
partner.amd.com XSS vulnerability
Vulnerable URL: http://partner.amd.com/en-us/Pages/article-amd-processor-lineup-stronger.aspx?FollowSite=0=%27-confirm/OPENBUGBOUNTY/-%27 Details: Description| Value ---|--- Patched:| Yes, at 26.11.2017 Latest check for patch:| 26.11.2017 14:54 GMT Vulnerability type:| XSS Vulnerability status:|...
search.amd.com XSS vulnerability
Vulnerable URL: http://search.amd.com/en-us/Pages/results-all.aspx?FollowSite=0=%27-confirm/OPENBUGBOUNTY/-%27 Details: Description| Value ---|--- Patched:| Yes, at 26.11.2017 Latest check for patch:| 26.11.2017 14:54 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...
products.amd.com XSS vulnerability
Vulnerable URL: http://products.amd.com/Pages/default.aspx?FollowSite=0=%27-confirm/OPENBUGBOUNTY/-%27 Details: Description| Value ---|--- Patched:| Yes, at 14.11.2017 Latest check for patch:| 14.11.2017 10:43 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...