[SECURITY] [DSA 1907-1] New kvm packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1907-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano October 13, 2009 http://www.debian.org/security/faq -...

DSA-1907-1 kvm - several vulnerabilities

Bulletin has no description...

SLES11: Security update for KVM

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: kvm kvm-kmp-default kvm-kmp-pae More details may also be found by searching for the SuSE Enterprise Server 11 patch database located at...

SLES11: Security update for KVM

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: kvm kvm-kmp-default kvm-kmp-pae More details may also be found by searching for the SuSE Enterprise Server 11 patch database linked in the references...

RedHat Security Advisory RHSA-2009:1465

The remote host is missing updates announced in advisory RHSA-2009:1465. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on AMD64 and Intel 64 systems. KVM is a Linux kernel module built for the standard Red Hat Enterprise Linux kernel. The kvmemulatehypercall...

RedHat Security Advisory RHSA-2009:1465

The remote host is missing updates announced in advisory RHSA-2009:1465. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on AMD64 and Intel 64 systems. KVM is a Linux kernel module built for the standard Red Hat Enterprise Linux kernel. The kvmemulatehypercall...

kernel security and bug fix update

2.6.18-164.2.1.0.1.el5 - xen check to see if hypervisor supports memory reservation change Chuck Anderson orabug 7556514 - Add entropy support to igb John Sobecki orabug 7607479 - nfs convert ENETUNREACH to ENOTCONN orabug 7689332 - NET Add xen pv/bonding netconsole support Tina yang orabug 69930...

kvm security and bug fix update

83-105.0.1.el54.7 - Add kvm-add-oracle-workaround-for-libvirt-bug.patch kvm-83-105.el54.7 - kvm-qemu-virtio-net-do-not-return-stack-pointer-from-fun.patch bz524557 - Resolves: bz524557 QEMU crash during virtio-net WHQL tests for Win2008 R2 kvm-83-105.el54.6 -...

Moderate: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Updated 23rd February 2010 This update adds references to two KBase articles...

Important: Red Hat Security Advisory: kvm security and bug fix update

Updated kvm packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on...

kernel: KVM: x86: Disallow hypercalls for guest callers in rings > 0

The kvmemulatehypercall function in arch/x86/kvm/x86.c in KVM in the Linux kernel 2.6.25-rc1, and other versions before 2.6.31, when running on x86 systems, does not prevent access to MMU hypercalls from ring 0, which allows local guest OS users to cause a denial of service guest kernel crash and...

SuSE 11 Security Update : KVM (SAT Patch Number 1166)

The KVM technology available as Technical Preview in SUSE Linux Enterprise has been updated to version 0.10.5. While a minor security issue was fixed, this mainly is a huge version update. Changelog : - 'info chardev' monitor command - automatic port allocation for vnc and similar - improved cdro...

Linux Kernel kvm_emulate_hypercall函数非授权MMU调用漏洞

CVE ID: CVE-2009-3290 Linux Kernel是开放源码操作系统Linux所使用的内核。 运行在x86系统上的Linux Kernel KVM虚拟机的arch/x86/kvm/x86.c文件中的kvmemulatehypercall函数没有限制ring 0对MMU超级调用的访问，这允许本地guest用户导致guest内核崩溃，或通过随机地址读取guest内核内存。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Code injection

The kvmemulatehypercall function in arch/x86/kvm/x86.c in KVM in the Linux kernel 2.6.25-rc1, and other versions before 2.6.31, when running on x86 systems, does not prevent access to MMU hypercalls from ring 0, which allows local guest OS users to cause a denial of service guest kernel crash and...

CVE-2009-3290

The kvmemulatehypercall function in arch/x86/kvm/x86.c in KVM in the Linux kernel 2.6.25-rc1, and other versions before 2.6.31, when running on x86 systems, does not prevent access to MMU hypercalls from ring 0, which allows local guest OS users to cause a denial of service guest kernel crash and...

CVE-2009-3290

CVE-2009-3290 affects KVM in Linux kernel 2.6.25-rc1 and earlier than 2.6.31 on x86. The kvm_emulate_hypercall implementation fails to restrict MMU hypercalls by CPL, enabling a local guest user to crash the guest kernel and read/write guest memory via unspecified addresses. Root cause: CPL check...

CVE-2009-3290

The kvmemulatehypercall function in arch/x86/kvm/x86.c in KVM in the Linux kernel 2.6.25-rc1, and other versions before 2.6.31, when running on x86 systems, does not prevent access to MMU hypercalls from ring 0, which allows local guest OS users to cause a denial of service guest kernel crash and...

CVE-2009-3290

The kvmemulatehypercall function in arch/x86/kvm/x86.c in KVM in the Linux kernel 2.6.25-rc1, and other versions before 2.6.31, when running on x86 systems, does not prevent access to MMU hypercalls from ring 0, which allows local guest OS users to cause a denial of service guest kernel crash and...

Debian Security Advisory DSA 1846-1 (kvm)

The remote host is missing an update to kvm announced via advisory DSA 1846-1. OpenVAS Vulnerability Test $Id: deb18461.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1846-1 kvm Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian: Security Advisory (DSA-1846-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...