428 matches found
DSA-2608-1 qemu - buffer overflow
Bulletin has no description...
DSA-2607-1 qemu-kvm - buffer overflow
Bulletin has no description...
Debian: Security Advisory (DSA-2608-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DSA-2607-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2012-6075
Buffer overflow in the e1000receive function in the e1000 device driver hw/e1000.c in QEMU 1.3.0-rc2 and other versions, when the SBP and LPE flags are disabled, allows remote attackers to cause a denial of service guest OS crash and possibly execute arbitrary guest code via a large packet...
Scientific Linux Security Update : kernel on SL5.x i386/x86_64
a flaw in the mount handling routine for 64-bit systems that allowed a local user to cause denial of service CVE-2006-7203, Important. a flaw in the PPP over Ethernet implementation that allowed a remote user to cause a denial of service CVE-2007-2525, Important. a flaw in the Bluetooth subsystem...
Scientific Linux Security Update : kernel on SL5.x i386/x86_64
CVE-2007-4567 kernel: ipv6hopjumbo remote system crash CVE-2009-4537 kernel: r8169 issue reported at 26c3 CVE-2009-4538 kernel: e1000e frame fragment issue CVE-2009-4536 kernel: e1000 issue reported at 26c3 This update fixes the following security issues : - a flaw was found in the IPv6 Extension...
Scientific Linux Security Update : kvm on SL5.x x86_64 (20120123)
KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on AMD64 and Intel 64 systems. KVM is a Linux kernel module built for the standard Scientific Linux kernel. A heap overflow flaw was found in the way QEMU-KVM emulated the e1000 network interface card. A privileged guest...
CentOS Update for kmod-kvm CESA-2012:0051 centos5
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CentOS Update for kmod-kvm CESA-2012:0051 centos5
Check for the Version of kmod-kvm OpenVAS Vulnerability Test CentOS Update for kmod-kvm CESA-2012:0051 centos5 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
CentOS Update for qemu-img CESA-2012:0050 centos6
Check for the Version of qemu-img OpenVAS Vulnerability Test CentOS Update for qemu-img CESA-2012:0050 centos6 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
Fedora 16 : qemu-0.15.1-5.fc16 (2012-8592)
CVE-2012-0029 e1000 buffer overflow bz 825895, bz 772075 - virtio-blk: refuse SGIO requests with scsi=off bz 826042 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format...
SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 6810)
This update fixes a several security issues and various bugs in the SUSE Linux Enterprise 10 SP 2 kernel. The following security issues were fixed : - Two sysfs filers in the qla2xxx driver were worldwriteable, so users could change SCSI attributes of the qla2xxx driver. CVE-2009-4536:...
Failover or Surebackup Starts a Virtual Machine With an Incorrect Ethernet Interface
Article Applicability The issue discussed in this article is strictly related to the use of VMXNET3 network adapters with the following vSphere VM guest operating systems: Windows 7 Windows 7 SP1 Server 2008 R2 Server 2008 R2 SP1 Challenge When you back up/replicate/copy/clone a vSphere VM runnin...
RHEL 5 : xen (RHSA-2012:0370)
Updated xen packages that fix one security issue and two bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
qemu: e1000: process_tx_desc legacy mode packets heap overflow
Heap-based buffer overflow in the processtxdesc function in the e1000 emulation hw/e1000.c in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service QEMU crash and possibly execute arbitrary code via crafted legacy mode packets...
xen security and bug fix update
3.0.3-135.el58.2 - Fix broken timestamp log rhbz 797836 3.0.3-135.el58.1 - qemu-dm/e1000: bounds packet size against buffer size rhbz 786862 - Use correct expansion in xen-network-common.sh rhbz 797191...
Fedora 16 : xen-4.1.2-6.fc16 (2012-1375)
Fix buffer overflow in e1000 emulation for HVM guests CVE-2012-0029, Start building xen's ocaml libraries Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much...
Fedora 15 : xen-4.1.2-6.fc15 (2012-1539)
Fix buffer overflow in e1000 emulation for HVM guests CVE-2012-0029, Start building xen's ocaml, fix a crash and turn a backtrace into an ordinary error Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempt...
qemu: e1000: process_tx_desc legacy mode packets heap overflow
Heap-based buffer overflow in the processtxdesc function in the e1000 emulation hw/e1000.c in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service QEMU crash and possibly execute arbitrary code via crafted legacy mode packets...