Lucene search
+L

92 matches found

BDU FSTEC
BDU FSTEC
added 2019/03/13 12:0 a.m.8 views

The vulnerability of the vcpu_scan_ioapic function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the vcpuscanioapic function arch/x86/kvm/x86.c in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure due to a system call to the Kernel-Based Virtual Machine KVM...

5.5CVSS6.5AI score0.00477EPSS
SaveExploits0References40Affected Software3
CNVD
CNVD
added 2017/12/18 12:0 a.m.13 views

Linux kernel denial of service vulnerability (CNVD-2017-37597)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A denial of service vulnerability exists in the KVM in Linux kernel. An attacker can exploit this vulnerability to...

6.5CVSS6.6AI score0.00451EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2017/08/01 2:22 p.m.10 views

Kernel: kvm: page reference leakage in handle_vmon

Linux kernel built with the KVM visualization support CONFIGKVM, with nested visualizationnVMX feature enablednested=1, is vulnerable to host memory leakage issue. It could occur while emulating VMXON instruction in 'handlevmon'. An L1 guest user could use this flaw to leak host memory potentiall...

6.5CVSS7.2AI score0.00401EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2017/06/28 4:57 p.m.8 views

Kernel: Kvm: vmx/svm potential privilege escalation inside guest

Linux kernel built with the Kernel-based Virtual Machine CONFIGKVM support was vulnerable to an incorrect segment selectorSS value error. The error could occur while loading values into the SS register in long mode. A user or process inside a guest could use this flaw to crash the guest, resultin...

8.4CVSS7.3AI score0.00582EPSS
SaveExploits0References4
OSV
OSV
added 2016/12/28 12:0 a.m.7 views

UBUNTU-CVE-2016-9588

arch/x86/kvm/vmx.c in the Linux kernel through 4.9 mismanages the BP and OF exceptions, which allows guest OS users to cause a denial of service guest OS crash by declining to handle an exception thrown by an L2 guest...

5.5CVSS6.7AI score0.00425EPSS
SaveExploits0References8
OSV
OSV
added 2015/11/10 2:51 a.m.5 views

USN-2801-1 linux vulnerability

Ben Serebrin discovered that the KVM hypervisor implementation in the Linux kernel did not properly catch Alignment Check exceptions. An attacker in a guest virtual machine could use this to cause a denial of service system crash in the host OS...

4.9CVSS6.8AI score0.00566EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2015/03/05 11:13 a.m.8 views

kernel: kvm: vmx: invalid host cr4 handling across vm entries

It was found that the Linux kernel's KVM implementation did not ensure that the host CR4 control register value remained unchanged across VM entries on the same virtual CPU. A local, unprivileged user could use this flaw to cause a denial of service on the system...

5.5CVSS6.3AI score0.00515EPSS
SaveExploits0References4
PyPA
PyPA
added 2014/02/06 5:0 p.m.8 views

PYSEC-2014-111

The icreateimagesandbacking aka createimagesandbacking method in libvirt driver in OpenStack Compute Nova Grizzly, Havana, and Icehouse, when using KVM live block migration, does not properly create all expected files, which allows attackers to obtain snapshot root disk contents of other users vi...

7.1CVSS6.9AI score0.02438EPSS
SaveExploits0References13Affected Software1
RedHat Linux
RedHat Linux
added 2012/02/21 2:20 a.m.38 views

Moderate: Red Hat Security Advisory: kvm security and bug fix update

Updated kvm packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

4CVSS5.8AI score0.00367EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2010/08/19 12:0 a.m.4 views

PT-2010-2200 · Red Hat · Red Hat Enterprise Virtualization +2

Name of the Vulnerable Software and Affected Versions: Red Hat Enterprise Virtualization RHEV version 2.2 KVM version 83 Description: The issue allows guest OS users to cause a denial of service, resulting in a host OS crash due to a NULL pointer dereference. This occurs when the Intel VT-x...

6.6CVSS5.9AI score0.00359EPSS
SaveExploits1References11
RedHat Linux
RedHat Linux
added 2010/02/09 10:1 a.m.8 views

kvm: emulator privilege escalation IOPL/CPL level check

The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing SMP, does not use the Current Privilege Level CPL and I/O Privilege Level IOPL to restrict instruction execution, which allows guest OS users to cause a denial of service guest OS crash or gain privileges on the...

4.1CVSS5.8AI score0.00382EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2010/02/09 12:0 a.m.5 views

PT-2010-2100 · Linux +1 · Kvm +1

Name of the Vulnerable Software and Affected Versions: KVM version 83 Description: The issue arises from the pit ioport read function in the Programmable Interval Timer PIT emulation, specifically in the i8254.c file. This function does not properly utilize the pit state data structure, allowing...

7.2CVSS6AI score0.02718EPSS
SaveExploits1References19
Rows per page
Query Builder