5708 matches found
Design/Logic Flaw
In all Qualcomm products with Android releases from CAF using the Linux kernel, an argument to a hypervisor function is not properly validated...
Integer overflow
In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in the hypervisor...
CVE-2016-10347
In all Qualcomm products with Android releases from CAF using the Linux kernel, an argument to a hypervisor function is not properly validated...
CVE-2016-10346
In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in the hypervisor...
CVE-2016-10346
CVE-2016-10346 describes an integer overflow in the hypervisor of Qualcomm closed‑source components used in Android CAF/Linux kernel. The vulnerability affects Qualcomm hypervisor code in Android devices, with root cause an integer overflow in the hypervisor. According to the provided data, the i...
Xen Hypervisor Multiple Vulnerabilities (XSA-226 - XSA-230)
According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by multiple vulnerabilities. Note that Nessus has checked the changeset versions based on the xen.git change log. Nessus did not check guest hardware configurations or if patches were applie...
Xen memory corruption vulnerability (CNVD-2017-28619)
Xen is an open source virtual machine monitor product developed at the University of Cambridge in the United Kingdom. Xen suffers from a memory corruption vulnerability that allows an attacker to exploit the vulnerability to submit a specially crafted request to obtain sensitive information or...
Citrix Hypervisor unable to sync to NTP server
Unable to sync to NTP server...
Mystery Company Offers $250,000 Bounty for VM Escape Vulnerabilities
An unnamed company will start an eight-week, invite-only bug bounty program in September that offers a $250,000 payout for virtual-machine escape vulnerabilities tied to an unreleased product. Bugcrowd announced the program today, and said the high-priced bounty is the largest advertised bounty o...
Virtual Machine Automation (vm-automation) repository released
Rapid7 just released a new public repo called vm-automation. The vm-automation repository is a Python library that encapsulates existing methodologies for virtual machine and hypervisor automation and provides a platform-agnostic Python API. Currently, only ESXi and VMWare workstation are...
The vulnerability of the grant-table component in the Xen hypervisor allows a perpetrator to obtain confidential information or enhance their privileges.
The vulnerability of the grant-table component in the Xen hypervisor is related to incorrect handling of information regarding certain simultaneous unmap calls. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain confidential information or enhance their...
The vulnerability of Xen hypervisors allows a attacker to gain privileged access to the host.
The vulnerability of Xen hypervisors is related to improper page transfer. Exploiting this vulnerability can allow a remote attacker to gain privileged access to the host from the host operating system...
The vulnerability of Xen hypervisors allows a perpetrator to obtain confidential information or cause service failures.
The vulnerability of Xen hypervisors is related to insufficient checking of the ports accessed by the attackers. Exploiting this vulnerability can allow a remote attacker to cause service failures or obtain confidential information such as changing the zero pointer...
The vulnerability of the grant-table component in the Xen hypervisor allows a attacker to trigger a service failure or gain privileged access to the host.
The vulnerability of the grant-table component in the Xen hypervisor is related to deficiencies in access control for GNTMAPdevicemap and GNTMAPhostmap. Exploiting this vulnerability could allow a malicious actor to trigger a service failure memory corruption or gain privileged access to the host...
The vulnerability of Xen hypervisors allows a malicious actor to gain privileged access to the host.
The vulnerability of Xen hypervisors is related to insufficient checking of memory distribution during P2M operations. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain privileged access to the host from the guest operating system...
The vulnerability of Xen hypervisors allows a attacker to trigger a service failure or gain privileged access to the host.
The vulnerability of Xen hypervisors is related to deficiencies in access control for GNTMAPdevicemap and GNTMAPhostmap provided that GNTMAPhostmap is in the unmapping mode. Exploiting this vulnerability can allow a malicious actor to cause a service failure memory corruption or gain privileged...
Recommended Hotfixes for Citrix Hypervisor 8.2 Cumulative Update 1
This article contains the minimum set of hotfixes to install to get your Citrix Hypervisor 8.2 Cumulative Update 1 installation up to date. If you use theAutomated Updatesfeature of XenCenter, this is the set of hotfixes that are installed. Note : Citrix Hypervisor 8.2 Cumulative Update 1 reaches...
Virtuozzo 6 : spice-server / spice-server-devel (VZLSA-2017-0253)
An update for spice-server is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...
