4573 matches found
hyperv-daemons bug fix update
An update is available for hyperv-daemons. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The hyperv-daemons packages provide a suite of daemons that are needed...
Restore or Failback to Server 2022 Hyper-V host fails with "Unable to update VM security descriptor Error"
Article Applicability This article is specific to an error that occurs when attempting to restore or failback to a Hyper-V host running Windows Server 2022 or versions 2004 and 20H2 of the Semi-Annual Channel versions of Windows Server. This article addresses an issue that is mentioned in the Vee...
GSD-2023-1001034 x86/hyperv: Remove unregister syscore call from Hyper-V cleanup
x86/hyperv: Remove unregister syscore call from Hyper-V cleanup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...
PT-2023-34434
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description A potential security issue has been identified in the Linux Kernel related to the Hyper-V cleanup process. The actual impact and attack plausibility have not yet been proven. Recommendations...
PT-2023-34111
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.15.86 Description The issue is related to the removal of an unregister syscore call from Hyper-V cleanup in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations...
PT-2023-33687 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to the removal of an unregister syscore call from Hyper-V cleanup in the x86/hyperv component. The actual impact and attack plausibility have not yet been proven...
PT-2025-54001
Name of the Vulnerable Software and Affected Versions linux affected versions not specified Description A flaw exists in the Linux kernel related to Indirect Branch Tracking IBT on x86/Hyperv systems. Specifically, when running on hardware supporting IBT within Hyper-V VMs with ConfigVersion 9.3 ...
hyper-staticfile's location header incorporates user input, allowing open redirect
When hyper-staticfile performs a redirect for a directory request e.g. a request for /dir that redirects to /dir/, the Location header value was derived from user input the request path, simply appending a slash. The intent was to perform an origin-relative redirect, but specific inputs allowed...
GHSA-5WVV-Q5FV-2388 hyper-staticfile's location header incorporates user input, allowing open redirect
When hyper-staticfile performs a redirect for a directory request e.g. a request for /dir that redirects to /dir/, the Location header value was derived from user input the request path, simply appending a slash. The intent was to perform an origin-relative redirect, but specific inputs allowed...
RUSTSEC-2022-0072 Location header incorporates user input, allowing open redirect
When hyper-staticfile performs a redirect for a directory request e.g. a request for /dir that redirects to /dir/, the Location header value was derived from user input the request path, simply appending a slash. The intent was to perform an origin-relative redirect, but specific inputs allowed...
Location header incorporates user input, allowing open redirect
When hyper-staticfile performs a redirect for a directory request e.g. a request for /dir that redirects to /dir/, the Location header value was derived from user input the request path, simply appending a slash. The intent was to perform an origin-relative redirect, but specific inputs allowed...
The vulnerability of the Hyper-V hardware virtualization system for Microsoft Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the Hyper-V hardware virtualization technology in Microsoft Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
December 20, 2022—KB5022554 (OS Build 17763.3772) Out-of-band
None None...
December 20, 2022—KB5022553 (OS Build 20348.1368) Out-of-band
None None...
Microsoft Windows Multiple Vulnerabilities (KB5021233)
This host is missing an important security update according to Microsoft KB5021233 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft Windows Multiple Vulnerabilities (KB5021237)
This host is missing an important security update according to Microsoft KB5021237 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
CVE-2022-44682
Windows Hyper-V Denial of Service Vulnerability...
CVE-2022-44682
Windows Hyper-V Denial of Service Vulnerability...
