RHEL 6 : rhev-hypervisor (RHSA-2015:1713)

Updated rhev-hypervisor packages that fix multiple security issues, several bugs, and add various enhancements are now available. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Xen Hypervisor Memory Disclosure

The vulnerability of the QEMU emulator for networking hardware in the Xen hypervisor is related to the lack of protection for service data. Exploiting this vulnerability allows a remote attacker to read data stored in memory...

Xen Hypervisor Code Execution

The vulnerability of the IDE subsystem of the QEMU component in the Xen hypervisor is caused by a buffer overflow. Exploiting this vulnerability allows an attacker acting locally to execute arbitrary code when the compact disk drive is turned on...

Xen Hypervisor Privilege Escalation

The vulnerability of the QEMU hypervisor component in Xen is related to deficiencies in access control for certain functions. Exploiting this vulnerability can allow an attacker, operating locally, to gain privileges necessary to disable block devices...

Red Hat Enterprise Virtualization Hypervisor Local Unauthorized Access Vulnerability

Red Hat Enterprise Virtualization Hypervisor is a virtualization solution hypervisor. The Red Hat Enterprise Virtualization Hypervisor WEB management interface fails to properly handle session timeouts when a VM is selected in the VM Grid view, and local users have access to other WEB interfaces...

Red Hat Enterprise Virtualization Hypervisor worker_update_monitors_config() Competition Condition Error Vulnerability

Red Hat Enterprise Virtualization Hypervisor is a virtualization solution hypervisor. The Red Hat Enterprise Virtualization Hypervisor workerupdatemonitorsconfig function has a race condition error that can trigger a memory corruption that crashes the host QEMU-KVM or executes arbitrary code...

Important: Red Hat Security Advisory: rhev-hypervisor security, bug fix, and enhancement update

Updated rhev-hypervisor packages that fix multiple security issues, several bugs, and add various enhancements are now available. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Important: Red Hat Security Advisory: spice-server security update

An updated spice-server package that fixes one security issue is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

[SECURITY] Fedora 23 Update: xen-4.5.1-6.fc23

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

[SECURITY] Fedora 21 Update: xen-4.4.2-9.fc21

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

[SECURITY] Fedora 22 Update: xen-4.5.1-5.fc22

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

[SECURITY] Fedora 23 Update: xen-4.5.1-5.fc23

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

Xen Hypervisor Failure

The vulnerability of Xen hypervisors is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow a local attacker to cause a failure in the host operating system’s services...

Citrix XenServer QEMU IDE Buffer Overflow Code Execution (CTX201593)

The version of Citrix XenServer running on the remote host is affected by a heap buffer overflow condition in the IDE subsystem of the bundled QEMU software, which is related to I/O buffer access when handling certain ATAPI commands. An attacker, with sufficient privileges in an HVM guest VM, can...

[SECURITY] Fedora 21 Update: xen-4.4.2-7.fc21

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

[SECURITY] Fedora 22 Update: xen-4.5.1-2.fc22

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

Oracle Patches Java Zero Day

Oracle has released its quarterly patch update, which includes fixes for nearly 200 vulnerabilities. The most notable bug fixed in this release is the Java zero day that’s been used in an ongoing attack campaign. The massive release from Oracle has patches for a long list of products, but the Jav...

FreeBSD : xen-kernel -- Information leak through XEN_DOMCTL_gettscinfo (ce658051-27ea-11e5-a4a5-002590263bf5)

The Xen Project reports : The handler for XENDOMCTLgettscinfo failed to initialize a padding field subsequently copied to guest memory. A similar leak existed in XENSYSCTLgetdomaininfolist, which is being addressed here regardless of that operation being declared unsafe for disaggregation by...

Xen Hypervisor Code Execution

The vulnerability of the QEMU hypervisor component in Xen is caused by an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending specially crafted packets containing fields such as TXSTATUSSTARTPACKET and TXSTATUSDEVIC...

Surebackup Error “OS did not boot in the allotted time”

Challenge A VM being started by SureBackup fails with the error: OS did not boot in the allotted time Cause This error occurs when the VM being powered on by the SureBackup job fails to become stable within the "Maximum allowed boot time" specified in the Application Group settings or the Linked...