Debian: Security Advisory (DSA-1962-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2009-1659)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 5 : kvm (ELSA-2009-1659)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2009-1659 advisory. - Resolves: bz541164 CVE-2009-4031 kernel: KVM: x86 emulator: limit instructions to 15 bytes rhel-5.4.z Tenable has extracted the preceding description block...

RHEL 5 : kvm (RHSA-2009:1659)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2009:1659 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on AMD64 and Intel 64 systems. KVM is a Linux kernel module built for th...

Scientific Linux Security Update : kvm on SL5.4 x86_64

CVE-2009-4031 kernel: KVM: x86 emulator: limit instructions to 15 bytes On x86 platforms, the doinsnfetch function did not limit the amount of instruction bytes fetched per instruction. Users in guest operating systems could leverage this flaw to cause large latencies on SMP hosts that could lead...

Linux kernel 2.6.x KVM超大SMP指令本地拒绝服务漏洞

BUGTRAQ ID: 37130 CVE ID: CVE-2009-4031 Linux Kernel是开放源码操作系统Linux所使用的内核。 在x86平台上，x86模拟器上的arch/x86/kvm/emulate.c文件的doinsnfetch函数没有限制每次指令可获取的指令字节数。guest操作系统中的用户可以利用这个漏洞在SMP主机上造成很大的延迟，导致主机操作系统上本地拒绝服务。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

openSUSE Security Update : kernel (kernel-2146)

This update of the openSUSE 11.2 kernel contains a lot of bug and security fixes. Following security issues were fixed: CVE-2010-0622: The wakefutexpi function in kernel/futex.c in the Linux kernel does not properly handle certain unlock operations for a Priority Inheritance PI futex, which allow...

Important: Red Hat Security Advisory: rhev-hypervisor security and bug fix update

An updated rhev-hypervisor package that fixes security issues and several bugs is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The rhev-hypervisor package provides a Red Hat Enterprise Virtualization RHEV Hypervisor ISO disk...

[SECURITY] [DSA-1962-1] New kvm packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1962 [email protected] http://www.debian.org/security/ Giuseppe Iuculano December 23, 2009 http://www.debian.org/security/faq -...

RedHat Security Advisory RHSA-2009:1659

The remote host is missing updates announced in advisory RHSA-2009:1659. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on AMD64 and Intel 64 systems. KVM is a Linux kernel module built for the standard Red Hat Enterprise Linux kernel. On x86 platforms, the doinsnfet...

Fedora 10 : kernel-2.6.27.41-170.2.117.fc10 (2009-13098)

Update to kernel 2.6.27.41: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.39 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.40 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.41 Note that Tenable Network Security has extracted the preceding description...

kvm security and bug fix update

kvm-83-105.0.1.el54.13 - Add kvm-add-oracle-workaround-for-libvirt-bug.patch kvm-83-105.el54.13 - kvm-kernel-KVM-x86-emulator-limit-instructions-to-15-bytes.patch bz541164 - Resolves: bz541164 CVE-2009-4031 kernel: KVM: x86 emulator: limit instructions to 15 bytes rhel-5.4.z kvm-83-105.el54.12 -...

CVE-2009-4031

The doinsnfetch function in arch/x86/kvm/emulate.c in the x86 emulator in the KVM subsystem in the Linux kernel before 2.6.32-rc8-next-20091125 tries to interpret instructions that contain too many bytes to be valid, which allows guest OS users to cause a denial of service increased scheduling...

CVE-2009-4031

CVE-2009-4031 affects the KVM x86 emulator (arch/x86/kvm/emulate.c) in the Linux kernel prior to 2.6.32-rc8-next-20091125. The do_insn_fetch path could interpret instructions longer than valid, failing to enforce the 15-byte limit per instruction, which guest OS users can abuse to cause a denial ...