CVE-2023-25683

IBM PowerVM Hypervisor FW950.00 through FW950.71, FW1010.00 through FW1010.40, FW1020.00 through FW1020.20, and FW1030.00 through FW1030.11 could allow an attacker to obtain sensitive information if they gain service access to the HMC. IBM X-Force ID: 247592...

Information disclosure

IBM PowerVM Hypervisor FW950.00 through FW950.71, FW1010.00 through FW1010.40, FW1020.00 through FW1020.20, and FW1030.00 through FW1030.11 could allow an attacker to obtain sensitive information if they gain service access to the HMC. IBM X-Force ID: 247592...

CVE-2023-25683

This CVE concerns IBM PowerVM Hypervisor information disclosure. Affected firmware ranges are FW950.00–FW950.71, FW1010.00–FW1010.40, FW1020.00–FW1020.20, and FW1030.00–FW1030.11. The underlying issue allows an attacker with HMC service access to obtain sensitive information. IBM’s bulletin cites...

CVE-2023-25683 IBM PowerVM Hypervisor information disclosure

IBM PowerVM Hypervisor FW950.00 through FW950.71, FW1010.00 through FW1010.40, FW1020.00 through FW1020.20, and FW1030.00 through FW1030.11 could allow an attacker to obtain sensitive information if they gain service access to the HMC. IBM X-Force ID: 247592...

PT-2023-20242 · Ibm · Ibm Powervm Hypervisor

Name of the Vulnerable Software and Affected Versions: IBM PowerVM Hypervisor versions FW950.00 through FW950.71 IBM PowerVM Hypervisor versions FW1010.00 through FW1010.40 IBM PowerVM Hypervisor versions FW1020.00 through FW1020.20 IBM PowerVM Hypervisor versions FW1030.00 through FW1030.11...

CVE-2023-25683: Exposure of Sensitive Information to an Unauthorized Actor

IBM PowerVM Hypervisor FW950.00 through FW950.71, FW1010.00 through FW1010.40, FW1020.00 through FW1020.20, and FW1030.00 through FW1030.11 could allow an attacker to obtain sensitive information if they gain service access to the HMC. IBM X-Force ID: 247592...

IBM PowerVM Hypervisor 安全漏洞

IBM PowerVM Hypervisor is an application from International Business Machines IBM, Inc. Providing a secure and scalable virtualized environment, these applications are built on the advanced RAS capabilities and leading performance of the Power Systems platform. An information disclosure...

The vulnerability of the vgauth module of the VMware Tools component in the VMware ESXi hypervisor allows a attacker to influence the confidentiality and integrity of the protected information.

The vulnerability of the vgauth module in the VMware Tools component of the VMware ESXi hypervisor is related to errors during authentication procedures. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...

DEBIAN-CVE-2023-20867

A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine...

VMware patches critical vulnerabilities in Aria Operations for Networks

VMware has released security updates to fix three vulnerabilities in Aria Operations for Networks which could result in information disclosure and remote code execution. The vulnerabilities were found in Aria Operations for Networks which was formerly known as vRealize Network Insight. Users of...

SUSE CVE-2023-20867

A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine...

Citrix Hypervisor 8.2 Cumulative Update 1 - Base Installation ISO - updated June 2023

We have reissued the base installation ISO for Citrix Hypervisor 8.2 Cumulative Update 1 and refreshed its content to enable customers to install Citrix Hypervisor 8.2 Cumulative Update 1 on certain Intel® Xeon® 84xx/64xx/54xx/44xx/34xx Sapphire Rapids systems. For more information, see theHardwa...

CVE-2023-30612 affecting package cloud-hypervisor for versions less than 31.1-1

CVE-2023-30612 affecting package cloud-hypervisor for versions less than 31.1-1. An upgraded version of the package is available that resolves this issue...

Actors, Threats and Vulnerabilities 22 to 28 May 2023

For a detailed threat digest, download the pdf file here Summary HiveForce Labs recently made several significant discoveries related to cybersecurity threats. Over the past week, the fact that there were a total of ten attacks executed, taking advantage of four different vulnerabilities in vario...

Bootlicker - A Generic UEFI Bootkit Used To Achieve Initial Usermode Execution

bootlicker is a legacy, extensible UEFI firmware rootkit targeting vmware hypervisor virtual machines. It is designed to achieve initial code execution within the context of the windows kernel, regardless of security settings configured. Architecture bootlicker takes its design from the legacy...

Fedora: Security Advisory for xen (FEDORA-2023-8334fe0ecb)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 38 Update: xen-4.17.1-2.fc38

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

CVE-2023-30440

IBM PowerVM Hypervisor FW860.00 through FW860.B3, FW950.00 through FW950.70, FW1010.00 through FW1010.50, FW1020.00 through FW1020.30, and FW1030.00 through FW1030.10 could allow a local attacker with control a partition that has been assigned SRIOV virtual function VF to cause a denial of servic...

Design/Logic Flaw

IBM PowerVM Hypervisor FW860.00 through FW860.B3, FW950.00 through FW950.70, FW1010.00 through FW1010.50, FW1020.00 through FW1020.30, and FW1030.00 through FW1030.10 could allow a local attacker with control a partition that has been assigned SRIOV virtual function VF to cause a denial of servic...

CVE-2023-30440

CVE-2023-30440 affects IBM PowerVM Hypervisor across multiple firmware branches (FW860, FW950, FW1010, FW1020, FW1030). The issue allows a local attacker who controls a partition with an SRIOV VF to cause a denial of service to a peer partition or arbitrary data corruption. Root cause details spe...