6376 matches found
ALPINE-CVE-2017-14316
A parameter verification issue was discovered in Xen through 4.9.x. The function allocheappages allows callers to specify the first NUMA node that should be used for allocations through the memflags parameter; the node is extracted using the MEMFgetnode macro. While the function checks to see if...
insufficient grant unmapping checks for x86 PV guests
ISSUE DESCRIPTION When removing or replacing a grant mapping, the x86 PV specific path needs to make sure page table entries remain in sync with other accounting done. Although the identity of the page frame was validated correctly, neither the presence of the mapping nor page writability were...
CVE-2017-12223
A vulnerability in the ROM Monitor ROMMON code of Cisco IR800 Integrated Services Router Software could allow an unauthenticated, local attacker to boot an unsigned Hypervisor on an affected device and compromise the integrity of the system. The vulnerability is due to insufficient sanitization o...
Design/Logic Flaw
A vulnerability in the ROM Monitor ROMMON code of Cisco IR800 Integrated Services Router Software could allow an unauthenticated, local attacker to boot an unsigned Hypervisor on an affected device and compromise the integrity of the system. The vulnerability is due to insufficient sanitization o...
CVE-2017-12223
A vulnerability in the ROM Monitor ROMMON code of Cisco IR800 Integrated Services Router Software could allow an unauthenticated, local attacker to boot an unsigned Hypervisor on an affected device and compromise the integrity of the system. The vulnerability is due to insufficient sanitization o...
CVE-2017-12223: Improper Input Validation
A vulnerability in the ROM Monitor ROMMON code of Cisco IR800 Integrated Services Router Software could allow an unauthenticated, local attacker to boot an unsigned Hypervisor on an affected device and compromise the integrity of the system. The vulnerability is due to insufficient sanitization o...
PT-2017-12414
Name of the Vulnerable Software and Affected Versions Cisco IR800 Integrated Services Router Software affected versions not specified Description A vulnerability in the ROM Monitor ROMMON code could allow an unauthenticated, local attacker to compromise the integrity of the system by booting an...
Cisco IR800 Integrated Services Router ROM Monitor Input Validation Vulnerability
A vulnerability in the ROM Monitor ROMMON code of Cisco IR800 Integrated Services Router Software could allow an unauthenticated, local attacker to boot an unsigned Hypervisor on an affected device and compromise the integrity of the system. The vulnerability is due to insufficient sanitization o...
[SECURITY] Fedora 27 Update: xen-4.9.0-9.fc27
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
[SECURITY] Fedora 26 Update: xen-4.8.1-8.fc26
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
Xen Hypervisor Function Error Condition Handling Lock Release Failure Guest-to-Host DoS (XSA-235)
According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by flaw in the xenmemaddtophysmapone function in arch/arm/mm.c that is triggered as the application fails to release a lock when handling certain error conditions. This may allow a privilege...
[SECURITY] Fedora 26 Update: xen-4.8.1-7.fc26
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
FAQ: NetScaler SD-WAN Center and Hardware Requirements
Question: Is It Possible to Increase the Cores and RAM of an Existing SD-WAN Center VM? Answer: Yes it is possible to increase the cores and RAM of an existing SD-WAN Center VM. If the hypervisor has sufficient resources shutdown the SD-WAN Center instance and increase the Cores and RAM to the...
Hyper-V OS Code Execution
The vulnerability of the Hyper-V operating system’s hypervisor exists due to insufficient validation of input data by the privileged user during guest mode. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
[SECURITY] Fedora 26 Update: xen-4.8.1-6.fc26
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
Google Android Qualcomm Component Unauthorized Operation Vulnerability (CNVD-2017-26919)
Android is a Linux-based open-source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm closed-source components are among the closed-source components developed by Qualcomm. A security vulnerability exists in the Qualcomm closed-source component in Android, whi...
Google Android Qualcomm component integer overflow vulnerability (CNVD-2017-26920)
Android is a Linux-based open-source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm closed-source components are among the closed-source components developed by Qualcomm. An integer overflow vulnerability exists in the hypervisor of the Qualcomm closed-sourc...
CVE-2016-10346
In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in the hypervisor...