xen-kernel -- ioreq handling possibly susceptible to multiple read issue

The Xen Project reports: Single memory accesses in source code can be translated to multiple ones in machine code by the compiler, requiring special caution when accessing shared memory. Such precaution was missing from the hypervisor code inspecting the state of I/O requests sent to the device...

The vulnerability of Xen hypervisors, which allows a malicious actor to trigger a service failure

The vulnerability of the Xen hypervisor’s KVM subcomponent is related to resource management errors. Exploiting this vulnerability allows an attacker, operating locally, to cause service failures by repeatedly triggering exceptions related to svm.c and vmx.c...

The vulnerability of Xen hypervisors, which allows a malicious actor to trigger a service failure

The vulnerability of the hypercallcreatecontinuation function in arch/arm/domain.c of the Xen supervisor is related to security configuration errors. Exploiting this vulnerability allows a local attacker to trigger a service failure through a specially crafted supervisor call...

The vulnerability of Xen hypervisors, which allows a malicious actor to trigger a service failure

The vulnerability of the KVM subsystem in Xen hypervisors is related to resource management errors. Exploiting this vulnerability can allow an attacker, operating locally, to cause service failures by repeatedly triggering exceptions related to SVMs...

CVE-2015-7078

Use-after-free vulnerability in Hypervisor in Apple OS X before 10.11.2 allows local users to gain privileges via vectors involving VM objects...

Design/Logic Flaw

Use-after-free vulnerability in Hypervisor in Apple OS X before 10.11.2 allows local users to gain privileges via vectors involving VM objects...

CVE-2015-7078

CVE-2015-7078 is a use-after-free vulnerability in the Apple OS X Hypervisor before 10.11.2. The issue stems from a use-after-free in the hypervisor driver when handling VM objects, enabling a local attacker to gain kernel/privilege level access. Affected product: OS X (pre-10.11.2) . Impact per ...

CVE-2015-7078

Use-after-free vulnerability in Hypervisor in Apple OS X before 10.11.2 allows local users to gain privileges via vectors involving VM objects...

Mac OS X Multiple Vulnerabilities (Security Updates 2015-005 / 2015-008)

The remote host is running a version of Mac OS X 10.9.5 or 10.10.5 that is missing Security Update 2015-005 or 2015-008. It is, therefore, affected by multiple vulnerabilities in the following components : - apachemodphp - AppSandbox - Bluetooth - CFNetwork HTTPProtocol - Compression -...

Mac OS X 10.11.x < 10.11.2 Multiple Vulnerabilities

The remote host is running a version of Mac OS X that is 10.11.x prior to 10.11.2. It is, therefore, affected by multiple vulnerabilities in the following components : - apachemodphp - AppSandbox - Bluetooth - CFNetwork HTTPProtocol - Compression - Configuration Profiles - CoreGraphics - CoreMedi...

Debian Security Advisory DSA 3414-1 (xen - security update)

Multiple security issues have been found in the Xen virtualisation solution, which may result in denial of service or information disclosure. OpenVAS Vulnerability Test $Id: deb3414.nasl 6609 2017-07-07 12:05:59Z cfischer $ Auto-generated from advisory DSA 3414-1 using nvtgen 1.0 Script version:...

Moderate: Red Hat Enhancement Advisory: rhev-hypervisor bug fix, and enhancement update

Updated rhev-hypervisor packages that fix several bugs and add various enhancements are now available. The rhev-hypervisor package provides a Red Hat Enterprise Virtualization Hypervisor ISO disk image. The Red Hat Enterprise Virtualization Hypervisor is a dedicated Kernel-based Virtual Machine K...

RHEV: vdsm spice disable-ticketing and VM suspend and restore allows auth bypass

VDSM and libvirt in Red Hat Enterprise Virtualization Hypervisor aka RHEV-H 7-7.x before 7-7.2-20151119.0 and 6-6.x before 6-6.7-20151117.0 as packaged in Red Hat Enterprise Virtualization before 3.5.6 when VSDM is run with -spice disable-ticketing and a VM is suspended and then restored, allows...

virtual PMU is unsupported

ISSUE DESCRIPTION The Virtual Performance Measurement Unit feature has been documented as unsupported, so far only on Intel CPUs. Further issues have been found or are suspected which would also or exclusively affect AMD CPUs. We believe that the functionality is mostly intended for non-productio...

[SECURITY] Fedora 23 Update: xen-4.5.2-2.fc23

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

[SECURITY] Fedora 22 Update: xen-4.5.2-2.fc22

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

[SECURITY] Fedora 21 Update: xen-4.4.3-8.fc21

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

MGASA-2015-0450 Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 4.1.13 longterm kernel and fixes the following security issues: The virtnetprobe function in drivers/net/virtionet.c in the Linux kernel before 4.2 attempts to support a FRAGLIST feature without proper memory allocation, which allows guest OS users to cause...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Updated kernel packages that fix multiple security issues, address several hundred bugs, and add numerous enhancements are now available as part of the ongoing support and maintenance of Red Hat Enterprise Linux version 7. This is the second regular update. Red Hat Product Security has rated this...

DEBIAN-CVE-2015-7812

The hypercallcreatecontinuation function in arch/arm/domain.c in Xen 4.4.x through 4.6.x allows local guest users to cause a denial of service host crash via a preemptible hypercall to the multicall interface...