Out-of-bounds

VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x through 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 do not properly configure the virtual floppy device, which allows guest OS users to cause a denial of service out-of-bounds write...

CVE-2012-1517

The VMX process in VMware ESXi 4.1 and ESX 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service memory overwrite and process crash or possibly execute arbitrary code on the host OS via vectors involving function pointers...

CVE-2012-1179

The Linux kernel before 3.3.1, when KVM is used, allows guest OS users to cause a denial of service host OS crash by leveraging administrative access to the guest OS, related to the pmdnoneorclearbad function and page faults for huge pages. A privileged user in the KVM guest can use this flaw to...

CVE-2012-1601

The KVM implementation in the Linux kernel before 3.3.6 allows host OS users to cause a denial of service NULL pointer dereference and host OS crash by making a KVMCREATEIRQCHIP ioctl call after a virtual CPU already exists...

CVE-2011-1898

Xen 4.1 before 4.1.1 and 4.0 before 4.0.2, when using PCI passthrough on Intel VT-d chipsets that do not have interrupt remapping, allows guest OS users to gain host OS privileges by "using DMA to generate MSI interrupts by writing to the interrupt injection registers."...

Design/Logic Flaw

Xen 4.1 before 4.1.1 and 4.0 before 4.0.2, when using PCI passthrough on Intel VT-d chipsets that do not have interrupt remapping, allows guest OS users to gain host OS privileges by "using DMA to generate MSI interrupts by writing to the interrupt injection registers."...

CVE-2011-1898: Undefined Security Weakness

Xen 4.1 before 4.1.1 and 4.0 before 4.0.2, when using PCI passthrough on Intel VT-d chipsets that do not have interrupt remapping, allows guest OS users to gain host OS privileges by "using DMA to generate MSI interrupts by writing to the interrupt injection registers."...

Design/Logic Flaw

The virSecurityManagerGetPrivateData function in security/securitymanager.c in libvirt 0.8.8 through 0.9.1 uses the wrong argument for a sizeof call, which causes incorrect processing of "security manager private data" that "reopens disk probing" and might allow guest OS users to read arbitrary...

CVE-2011-2178

CVE-2011-2178 affects libvirt (virSecurityManagerGetPrivateData in security/security_manager.c) from versions 0.8.8–0.9.1. The bug uses the wrong argument for a sizeof call, causing incorrect processing of security manager private data that reopens disk probing, which may allow guest OS users to ...

CVE-2011-2178

The virSecurityManagerGetPrivateData function in security/securitymanager.c in libvirt 0.8.8 through 0.9.1 uses the wrong argument for a sizeof call, which causes incorrect processing of "security manager private data" that "reopens disk probing" and might allow guest OS users to read arbitrary...

VMware Products Multiple Vulnerabilities (Windows) - jun 11

The host is installed with VMWare products which are vulnerable to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbvmwareprdtsmultvulnwinjun11.nasl 6518 2017-07-04 13:49:06Z cfischer $ VMware Products Multiple Vulnerabilities Windows - jun 11 Authors: Antu Sanadi Copyright: Copyright ...

Code injection

libvirt.c in the API in Red Hat libvirt 0.8.8 does not properly restrict operations in a read-only connection, which allows remote attackers to cause a denial of service host OS crash or possibly execute arbitrary code via a 1 virNodeDeviceDettach, 2 virNodeDeviceReset, 3 virDomainRevertToSnapsho...

CVE-2011-1146

libvirt.c in the API in Red Hat libvirt 0.8.8 does not properly restrict operations in a read-only connection, which allows remote attackers to cause a denial of service host OS crash or possibly execute arbitrary code via a 1 virNodeDeviceDettach, 2 virNodeDeviceReset, 3 virDomainRevertToSnapsho...

CVE-2011-1146

libvirt.c in the API in Red Hat libvirt 0.8.8 does not properly restrict operations in a read-only connection, which allows remote attackers to cause a denial of service host OS crash or possibly execute arbitrary code via a 1 virNodeDeviceDettach, 2 virNodeDeviceReset, 3 virDomainRevertToSnapsho...

CVE-2011-1146: Undefined Security Weakness

libvirt.c in the API in Red Hat libvirt 0.8.8 does not properly restrict operations in a read-only connection, which allows remote attackers to cause a denial of service host OS crash or possibly execute arbitrary code via a 1 virNodeDeviceDettach, 2 virNodeDeviceReset, 3 virDomainRevertToSnapsho...

CVE-2011-0355: Undefined Security Weakness

Cisco Nexus 1000V Virtual Ethernet Module VEM 4.04 SV11 through SV13b, as used in VMware ESX 4.0 and 4.1 and ESXi 4.0 and 4.1, does not properly handle dropped packets, which allows guest OS users to cause a denial of service ESX or ESXi host OS crash by sending an 802.1Q tagged packet over an...

CVE-2010-4255: Undefined Security Weakness

The fixuppagefault function in arch/x86/traps.c in Xen 4.0.1 and earlier on 64-bit platforms, when paravirtualization is enabled, does not verify that kernel mode is used to call the handlegdtldtmappingfault function, which allows guest OS users to cause a denial of service host OS BUGON via a...

CVE-2010-4238

The vbdcreate function in Xen 3.1.2, when the Linux kernel 2.6.18 on Red Hat Enterprise Linux RHEL 5 is used, allows guest OS users to cause a denial of service host OS panic via an attempted access to a virtual CD-ROM device through the blkback driver. NOTE: some of these details are obtained fr...

CVE-2010-4238: Undefined Security Weakness

The vbdcreate function in Xen 3.1.2, when the Linux kernel 2.6.18 on Red Hat Enterprise Linux RHEL 5 is used, allows guest OS users to cause a denial of service host OS panic via an attempted access to a virtual CD-ROM device through the blkback driver. NOTE: some of these details are obtained fr...

PT-2010-5195

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2008 Gold, SP2, and R2 Description The issue allows guest OS users to cause a denial of service, resulting in the host OS hanging, by sending a crafted encapsulated packet over the VMBus. Recommendations For Microsoft...