Linux Kernel (x86) - Memory Sinkhole Privilege Escalation

Linux Kernel x86 - Memory Sinkhole Privilege Escalation ; memory sinkhole proof of concept ; hijack ring -2 execution through the apic overlay attack. ; deployed in ring 0 ; the SMBASE register of the core under attack TARGETSMBASE equ 0x1f5ef800 ; the location of the attack GDT. ; this is...

DEBIAN-CVE-2015-4692

The kvmapichasevents function in arch/x86/kvm/lapic.h in the Linux kernel through 4.1.3 allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact by leveraging /dev/kvm access for an ioctl call...

CVE-2015-4235

Cisco Application Policy Infrastructure Controller APIC devices with software before 1.03o and 1.1 before 1.11j and Nexus 9000 ACI devices with software before 11.04o and 11.1 before 11.11j do not properly restrict access to the APIC filesystem, which allows remote authenticated users to obtain...

Design/Logic Flaw

Cisco Application Policy Infrastructure Controller APIC devices with software before 1.03o and 1.1 before 1.11j and Nexus 9000 ACI devices with software before 11.04o and 11.1 before 11.11j do not properly restrict access to the APIC filesystem, which allows remote authenticated users to obtain...

CVE-2015-4235

Cisco Application Policy Infrastructure Controller APIC devices with software before 1.03o and 1.1 before 1.11j and Nexus 9000 ACI devices with software before 11.04o and 11.1 before 11.11j do not properly restrict access to the APIC filesystem, which allows remote authenticated users to obtain...

CVE-2015-4235

Summary: CVE-2015-4235 affects Cisco APIC and Nexus 9000 ACI devices; versioned software before 1.0(3o) and 1.1 before 1.1(1j) on APIC, and before 11.0(4o)/11.1 before 11.1(1j) on Nexus 9000 ACI, do not properly restrict access to the APIC filesystem. This enables remote authenticated users to ob...

Cisco Application Policy Infrastructure Controller Access Control Vulnerability

A vulnerability in the cluster management configuration of the Cisco Application Policy Infrastructure Controller APIC and the Cisco Nexus 9000 Series ACI Mode Switch could allow an authenticated, remote attacker to access the APIC as the root user. The vulnerability is due to improper...

Linux kvm_apic_has_events() function null pointer reference vulnerability

Linux Kernel is an open source operating system. A null pointer reference vulnerability in the Linux Kernel kvmapichasevents function allows users with access to /dev/kvm to crash the system...

CVE-2015-4225

Cisco Application Policy Infrastructure Controller APIC 1.01.110a and 1.01e on Nexus 9000 devices does not properly implement RBAC health scoring, which allows remote authenticated users to obtain sensitive information via unspecified vectors, aka Bug ID CSCuq77485...

Design/Logic Flaw

Cisco Application Policy Infrastructure Controller APIC 1.01.110a and 1.01e on Nexus 9000 devices does not properly implement RBAC health scoring, which allows remote authenticated users to obtain sensitive information via unspecified vectors, aka Bug ID CSCuq77485...

CVE-2015-4225

Cisco Application Policy Infrastructure Controller APIC 1.01.110a and 1.01e on Nexus 9000 devices does not properly implement RBAC health scoring, which allows remote authenticated users to obtain sensitive information via unspecified vectors, aka Bug ID CSCuq77485...

CVE-2015-4225

Cisco APIC on Nexus 9000 devices (versions 1.0(1.110a) and 1.0(1e)) contains a vulnerability where RBAC health scoring is not properly implemented, allowing remote authenticated users to read sensitive information via unspecified vectors (Bug CSCuq77485). The issue stems from RBAC protection arou...

Linux Kernel KVM 'kvm_apic_has_events()' Denial of Service Vulnerability

The Linux kernel is the kernel used by the open source operating system Linux. Linux Kernel KVM has a denial of service vulnerability in the implementation of the 'kvmapichasevents' function. Allowing a remote attacker to exploit this vulnerability could crash the system...

UBUNTU-CVE-2015-4692

The kvmapichasevents function in arch/x86/kvm/lapic.h in the Linux kernel through 4.1.3 allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact by leveraging /dev/kvm access for an ioctl call...

UBUNTU-CVE-2014-7188

The hvmmsrreadintercept function in arch/x86/hvm/hvm.c in Xen 4.1 through 4.4.x uses an improper MSR range for x2APIC emulation, which allows local HVM guests to cause a denial of service host crash or read data from the hypervisor or other guests via unspecified vectors...

openSUSE Security Update : XEN (openSUSE-SU-2012:1572-1)

This security update of XEN fixes various bugs and security issues. - Upstream patch 26088-xend-xml-filesize-check.patch - bnc787163 - CVE-2012-4544: xen: Domain builder Out-of- memory due to malicious kernel/ramdisk XSA 25 CVE-2012-4544-xsa25.patch - bnc779212 - CVE-2012-4411: XEN / qemu: guest...

CVE-2014-0155

The ioapicdeliver function in virt/kvm/ioapic.c in the Linux kernel through 3.14.1 does not properly validate the kvmirqdeliverytoapic return value, which allows guest OS users to cause a denial of service host OS crash via a crafted entry in the redirection table of an I/O APIC. NOTE: the affect...

DEBIAN-CVE-2014-0155

The ioapicdeliver function in virt/kvm/ioapic.c in the Linux kernel through 3.14.1 does not properly validate the kvmirqdeliverytoapic return value, which allows guest OS users to cause a denial of service host OS crash via a crafted entry in the redirection table of an I/O APIC. NOTE: the affect...

CVE-2014-0155

The ioapicdeliver function in virt/kvm/ioapic.c in the Linux kernel through 3.14.1 does not properly validate the kvmirqdeliverytoapic return value, which allows guest OS users to cause a denial of service host OS crash via a crafted entry in the redirection table of an I/O APIC. NOTE: the affect...

Design/Logic Flaw

The ioapicdeliver function in virt/kvm/ioapic.c in the Linux kernel through 3.14.1 does not properly validate the kvmirqdeliverytoapic return value, which allows guest OS users to cause a denial of service host OS crash via a crafted entry in the redirection table of an I/O APIC. NOTE: the affect...