Lucene search
K

5613 matches found

CNNVD
CNNVD
added 2021/07/02 12:0 a.m.2 views

ACRN 代码问题漏洞

ACRN is an open source virtual machine monitor for the Internet of Things. A null pointer dereference vulnerability exists in vqendchains in hw/pci/virtio/virtio.c in ACRN versions prior to 2.5. No detailed vulnerability details are provided at this time...

7.5CVSS5.6AI score0.01212EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/07/02 12:0 a.m.6 views

ACRN 代码问题漏洞

ACRN is an open source project released by the Linux Foundation, which is a hypervisor designed for IoT and embedded devices. A null pointer dereference vulnerability exists in devicemodel/hw/pci/xhci.c in versions prior to ACRN 2.5. No details of the vulnerability are provided at this time...

7.5CVSS5.6AI score0.01215EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2021/06/30 11:15 a.m.21 views

CVE-2021-28693

xen/arm: Boot modules are not scrubbed The bootloader will load boot modules e.g. kernel, initramfs... in a temporary area before they are copied by Xen to each domain memory. To ensure sensitive data is not leaked from the modules, Xen must "scrub" them before handing the page over to the...

5.5CVSS6.1AI score0.00321EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2021/06/30 11:15 a.m.30 views

CVE-2021-28692

inappropriate x86 IOMMU timeout detection / handling IOMMUs process commands issued to them in parallel with the operation of the CPUs issuing such commands. In the current implementation in Xen, asynchronous notification of the completion of such commands is not used. Instead, the issuing CPU...

7.1CVSS7AI score0.00284EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2021/06/29 12:15 p.m.26 views

CVE-2021-28690

x86: TSX Async Abort protections not restored after S3 This issue relates to the TSX Async Abort speculative security vulnerability. Please see https://xenbits.xen.org/xsa/advisory-305.html for details. Mitigating TAA by disabling TSX the default and preferred option requires selecting a...

6.5CVSS6.6AI score0.01019EPSS
Exploits0References2
GoogleProjectZero
GoogleProjectZero
added 2021/06/29 12:0 a.m.123 views

An EPYC escape: Case-study of a KVM breakout

Posted by Felix Wilhelm, Project Zero Introduction KVM for Kernel-based Virtual Machine is the de-facto standard hypervisor for Linux-based cloud environments. Outside of Azure, almost all large-scale cloud and hosting providers are running on top of KVM, turning it into one of the fundamental...

7.4CVSS7.3AI score0.00413EPSS
Exploits1
Citrix
Citrix
added 2021/06/28 12:0 a.m.4 views

Hotfix XS82E029 - For Citrix Hypervisor 8.2

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.2. Information About this Hotfix Component| Details ---|--- Prerequisite| None Post-update tasks| None Content live patchable| No Baselines for Live Patch| N/A Revision History| Published on Jun 28, 2021...

7.2AI score
Exploits0
CISA
CISA
added 2021/06/25 12:0 a.m.13 views

Citrix Releases Security Updates for Hypervisor

Citrix has released security updates to address vulnerabilities in Hypervisor. An attacker could exploit these vulnerabilities to cause a denial-of-service condition. CISA encourages users and administrators to review Citrix Security Update CTX316325 and apply the necessary updates. This product ...

6.8AI score
Exploits0References1
Citrix
Citrix
added 2021/06/23 11:6 a.m.113 views

Citrix Hypervisor Security Update

Two security issues have been identified in Citrix Hypervisor 8.2 LTSR, each of which may allow privileged code in a guest VM to cause the host to crash or become unresponsive. These issues only affect Citrix Hypervisor 8.2 LTSR. These issues have the following CVE identifiers: CVE-2021-3416...

6.5CVSS2.2AI score0.00455EPSS
Exploits0
Citrix
Citrix
added 2021/06/23 12:0 a.m.6 views

Hotfix XS82E025 - For Citrix Hypervisor 8.2

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.2. All customers who are affected by the issues described inCTX316325 - Citrix Hypervisor Multiple Security Updatesshould install this hotfix. Information About this Hotfix Component| Details ---|---...

7.4AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2021/06/23 12:0 a.m.2 views

The vulnerability of Xen hypervisors, caused by uncontrolled recursion, allows attackers to trigger an emergency shutdown of the application.

The vulnerability of the Xen hypervisor is caused by an uncontrolled recursion. Exploiting this vulnerability can allow an attacker to cause the application to terminate abnormally...

5.5CVSS6.8AI score0.00438EPSS
Exploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/06/23 12:0 a.m.2 views

The vulnerability of Xen hypervisors, related to memory release errors, allows a hacker to cause a service failure.

The vulnerability of the Xen hypervisor implementation is related to memory release errors. Exploiting this vulnerability can allow an attacker to cause a service failure by using the XSRESETWATCHES request...

5.5CVSS5.9AI score0.004EPSS
Exploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/06/23 12:0 a.m.2 views

The vulnerability of the Oxenstored process in the Xen hypervisor allows a attacker to trigger a service failure.

The vulnerability of the Oxenstored hypervisor in Xen relates to the allocation of unlimited memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

6CVSS6.2AI score0.00406EPSS
Exploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/06/23 12:0 a.m.2 views

The vulnerability of Xen hypervisors, related to pointer swapping errors, allows a perpetrator to cause a service failure.

The vulnerability of Xen hypervisors is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

6.2CVSS7.1AI score0.00379EPSS
Exploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/06/23 12:0 a.m.1 views

The vulnerability of Xen hypervisors, related to the provision of unlimited memory, allows a attacker to cause a service failure.

The vulnerability of Xen hypervisors relates to the provision of unlimited memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

6.2CVSS7.1AI score0.00373EPSS
Exploits0References7Affected Software4
Citrix
Citrix
added 2021/06/22 12:0 a.m.10 views

Driver Disk for Avago mpt3sas 38.00.00.00 - For Citrix Hypervisor 8.2 LTSR

Who Should Install this Driver Disk? Customers running the Citrix Hypervisor 8.2 LTSR release who use Avago's mpt3sas driver and wish to use the latest version of the following: Driver Module| Version ---|--- mpt3sas| 38.00.00.00 Issues Resolved In this Driver Disk Includes general enhancements a...

7AI score
Exploits0
Citrix
Citrix
added 2021/06/21 12:0 a.m.7 views

Hotfix XS82E028 - For Citrix Hypervisor 8.2

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.2. Information About this Hotfix Component| Details ---|--- Prerequisite| None Post-update tasks| None Content live patchable| No Baselines for Live Patch| N/A Revision History| Published on Jun 21, 2021...

7.2AI score
Exploits0
Citrix
Citrix
added 2021/06/21 12:0 a.m.6 views

Citrix Hypervisor 8.2 unable to load 2nd HBA card

Jun 4 15:46:50 hostname kernel: 75.692775 xen: -- pirq=85 - irq=85 gsi=85Jun 4 15:46:50 hostname kernel: 75.692987 Failed to setup GSI :85, errcode:-28Jun 4 15:46:50 hostname kernel: 75.928523 lpfc 0000:87:00.1: 3:6101 Disabling NVME support: Not supported by firmware: 1 1Jun 4 15:46:50 hostname...

7.1AI score
Exploits0
Fedora
Fedora
added 2021/06/17 1:12 a.m.59 views

[SECURITY] Fedora 33 Update: xen-4.14.2-2.fc33

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

7.1CVSS2.1AI score0.01019EPSS
Exploits0
OpenVAS
OpenVAS
added 2021/06/17 12:0 a.m.24 views

Debian: Security Advisory (DSA-4931-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1CVSS6.3AI score0.01019EPSS
Exploits0References4
Rows per page
Query Builder