Null pointer dereference

The vgicdistrmmiowrite function in the virtual guest interrupt controller GIC distributor arch/arm/vgic.c in Xen 4.4.x, when running on an ARM system, allows local guest users to cause a denial of service NULL pointer dereference and host crash via unspecified vectors...

UBUNTU-CVE-2014-2986

The vgicdistrmmiowrite function in the virtual guest interrupt controller GIC distributor arch/arm/vgic.c in Xen 4.4.x, when running on an ARM system, allows local guest users to cause a denial of service NULL pointer dereference and host crash via unspecified vectors...

CVE-2014-2986

The CVE-2014-2986 issue affects Xen 4.4.x running on ARM, where the vgic_distr_mmio_write function in the GIC distributor (arch/arm/vgic.c) can dereference an invalid pointer via unspecified vectors, enabling a local guest to trigger a denial of service and host crash. Multiple sources (including...

CVE-2014-2986

The vgicdistrmmiowrite function in the virtual guest interrupt controller GIC distributor arch/arm/vgic.c in Xen 4.4.x, when running on an ARM system, allows local guest users to cause a denial of service NULL pointer dereference and host crash via unspecified vectors...

CVE-2014-2986

The vgicdistrmmiowrite function in the virtual guest interrupt controller GIC distributor arch/arm/vgic.c in Xen 4.4.x, when running on an ARM system, allows local guest users to cause a denial of service NULL pointer dereference and host crash via unspecified vectors...

Hacking exposed MicroSD card vulnerability: execute arbitrary code-a vulnerability warning-the black bar safety net

In the last week held the chaos computer conference, well-known hardware hacker Huang Xin countryAndrew bunnie Huangreported the MicroSD card to the security risks. He and his colleagues found that some SD cards contain a be allowed on the card to execute arbitrary code the vulnerability, and in...

CVE-2014-2915

Xen 4.4.x, when running on ARM systems, does not properly restrict access to hardware features, which allows local guest users to cause a denial of service host or guest crash via unspecified vectors, related to 1 cache control, 2 coprocessors, 3 debug registers, and 4 other unspecified registers...

Design/Logic Flaw

Xen 4.4.x, when running on ARM systems, does not properly restrict access to hardware features, which allows local guest users to cause a denial of service host or guest crash via unspecified vectors, related to 1 cache control, 2 coprocessors, 3 debug registers, and 4 other unspecified registers...

CVE-2014-2915

Xen 4.4.x, when running on ARM systems, does not properly restrict access to hardware features, which allows local guest users to cause a denial of service host or guest crash via unspecified vectors, related to 1 cache control, 2 coprocessors, 3 debug registers, and 4 other unspecified registers...

UBUNTU-CVE-2014-2915

Xen 4.4.x, when running on ARM systems, does not properly restrict access to hardware features, which allows local guest users to cause a denial of service host or guest crash via unspecified vectors, related to 1 cache control, 2 coprocessors, 3 debug registers, and 4 other unspecified registers...

CVE-2014-2915

Xen 4.4.x, when running on ARM systems, does not properly restrict access to hardware features, which allows local guest users to cause a denial of service host or guest crash via unspecified vectors, related to 1 cache control, 2 coprocessors, 3 debug registers, and 4 other unspecified registers...

CVE-2014-2915

CVE-2014-2915 affects Xen 4.4.x running on ARM. The root cause is improper restriction/configuration of the hardware virtualization platform, allowing a local guest to access hardware features (cache control, coprocessors, debug registers, and other processor-specific registers). This can lead to...

CVE-2014-2915

Xen 4.4.x, when running on ARM systems, does not properly restrict access to hardware features, which allows local guest users to cause a denial of service host or guest crash via unspecified vectors, related to 1 cache control, 2 coprocessors, 3 debug registers, and 4 other unspecified registers...

ARM hypervisor crash on guest interrupt controller access

ISSUE DESCRIPTION When handling a guest access to the virtual GIC distributor interrupt controller Xen could dereference a pointer before checking it for validity leading to a hypervisor crash and host Denial of Service. IMPACT A buggy or malicious guest can crash the host. VULNERABLE SYSTEMS Bot...

Hardware features unintentionally exposed to guests on ARM

ISSUE DESCRIPTION When running on an ARM platform Xen was not correctly configuring the hardware virtualisation platform and therefore did not prevent guests from accessing various hardware features including cache control, coprocessors, debug registers and various processor specific registers...

DVR Infected with Bitcoin Mining Malware

Johannes Ullrich of the SANS Institute claims to have found malware infecting digital video recorders DVR predominately used to record footage captured by surveillance camera systems. Oddly enough, Ullrich claims that one of the two binaries of malware implicated in this attack scheme appears to ...

Linux netback crash trying to disable due to malformed packet

ISSUE DESCRIPTION When Linux's netback sees a malformed packet, it tries to disable the interface which serves the misbehaving frontend. This involves taking a mutex, which might sleep. But in recent versions of Linux the guest transmit path is handled by NAPI in softirq context, where sleeping i...

CVE-2014-1278

The ptmxgetioctl function in the ARM kernel in Apple iOS before 7.1 and Apple TV before 6.1 allows local users to gain privileges or cause a denial of service out-of-bounds memory access and device crash via a crafted call...

Out-of-bounds

The ptmxgetioctl function in the ARM kernel in Apple iOS before 7.1 and Apple TV before 6.1 allows local users to gain privileges or cause a denial of service out-of-bounds memory access and device crash via a crafted call...

CVE-2014-1278

The CVE-2014-1278 entry concerns an out-of-bounds memory access in the ARM kernel ptmx_get_ioctl function on Apple iOS (pre-7.1) and Apple TV (pre-6.1). This local-privilege/escalation vulnerability could allow a local user to gain privileges or cause a denial of service via a crafted call. Affec...