CVE-2016-7585

An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves mishandling of DMA in the "EFI" component. It allows physically proximate attackers to discover the FileVault 2 encryption password via a crafted Thunderbolt adapter...

UBUNTU-CVE-2015-8817

QEMU aka Quick Emulator built to use 'addressspacetranslate' to map an address to a MemoryRegionSection is vulnerable to an OOB r/w access issue. It could occur while doing pcidmaread/write calls. Affects QEMU versions = 1.6.0 and = 2.3.1. A privileged user inside guest could use this flaw to cra...

Qemu: OOB access in address_space_rw leads to segmentation fault

An out-of-bounds flaw was found in the QEMU emulator built using 'addressspacetranslate' to map an address to a MemoryRegionSection. The flaw could occur while doing pcidmaread/write calls, resulting in an out-of-bounds read-write access error. A privileged user inside a guest could use this flaw...

Qemu: OOB access in address_space_rw leads to segmentation fault

An out-of-bounds flaw was found in the QEMU emulator built using 'addressspacetranslate' to map an address to a MemoryRegionSection. The flaw could occur while doing pcidmaread/write calls, resulting in an out-of-bounds read-write access error. A privileged user inside a guest could use this flaw...

ALPINE-CVE-2016-8668

The rockeriowritel function in hw/net/rocker/rocker.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service out-of-bounds read and QEMU process crash by leveraging failure to limit DMA buffer size...

UBUNTU-CVE-2016-8668

The rockeriowritel function in hw/net/rocker/rocker.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service out-of-bounds read and QEMU process crash by leveraging failure to limit DMA buffer size...

QEMU 'hw/dma/rc4030.c' Denial of Service Vulnerability

QEMU aka Quick Emulator is a set of simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A denial of service vulnerability exists in QEMU. An attacker could exploit this vulnerability to cause a denial of service QEMU instance cras...

Android Linux kernel information disclosure vulnerability (CNVD-2016-09459)

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and the Linux kernel is one of the kernels used by Linux. An information disclosure vulnerability exists in the arch/arm64/mm/dma-mapping.c file in versions of Linux kernel prior to 4.0.3...

Android Qualcomm DMA Component Information Disclosure Vulnerability (CNVD-2016-07470)

Android is a cell phone operating system based on the Linux open kernel. On Nexus 6 devices, an information disclosure vulnerability exists in the Qualcomm DMA component in versions of Android prior to 2016-09-05, which can be exploited by a remote attacker with a constructed application to cause...

DEBIAN-CVE-2014-9888

arch/arm/mm/dma-mapping.c in the Linux kernel before 3.13 on ARM platforms, as used in Android before 2016-08-05 on Nexus 5 and 7 2013 devices, does not prevent executable DMA mappings, which might allow local users to gain privileges via a crafted application, aka Android internal bug 28803642 a...

DEBIAN-CVE-2016-4441

The getcmd function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller FSC support in QEMU does not properly check DMA length, which allows local guest OS administrators to cause a denial of service out-of-bounds write and QEMU process crash via unspecified vectors, involving an SCSI command...

Moderate: Red Hat Bug Fix Advisory: Red Hat Storage 3.0 enhancement and bug fix update #3

Updated glusterfs, gluster-afr, gluster-dht, distribution, build, gluster-nfs, gluster-quota, gluster-smb, gluster-snapshot, gluster-swift, glusterfs-geo-replication, glusterfs-rdma, and glusterfs-server packages that fix numerous bugs and add various enhancements are now available for Red Hat...

CentOS Update for libibverbs CESA-2013:0509 centos6

Check for the Version of libibverbs OpenVAS Vulnerability Test CentOS Update for libibverbs CESA-2013:0509 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CentOS Update for ibacm CESA-2013:0509 centos6

Check for the Version of ibacm OpenVAS Vulnerability Test CentOS Update for ibacm CESA-2013:0509 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CentOS 6 : ibacm / ibsim / ibutils / infiniband-diags / infinipath-psm / libibmad / libibumad / etc (CESA-2013:0509)

Updated RDMA packages that fix multiple security issues, various bugs, and add an enhancement are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS base scores, which give...

RedHat Update for rdma RHSA-2013:0509-02

Check for the Version of rdma OpenVAS Vulnerability Test RedHat Update for rdma RHSA-2013:0509-02 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

RedHat Update for rdma RHSA-2013:0509-02

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

kernel: sfc: potential remote denial of service through TCP MSS option

The sfc aka Solarflare Solarstorm driver in the Linux kernel before 3.2.30 allows remote attackers to cause a denial of service DMA descriptor consumption and network-controller outage via crafted TCP packets that trigger a small MSS value...

kernel: b43: allocate receive buffers big enough for max frame len + offset

The dmarx function in drivers/net/wireless/b43/dma.c in the Linux kernel before 2.6.39 does not properly allocate receive buffers, which allows remote attackers to cause a denial of service system crash via a crafted frame...

virt: VT-d (PCI passthrough) MSI trap injection

Xen 4.1 before 4.1.1 and 4.0 before 4.0.2, when using PCI passthrough on Intel VT-d chipsets that do not have interrupt remapping, allows guest OS users to gain host OS privileges by "using DMA to generate MSI interrupts by writing to the interrupt injection registers."...