Qemu / KVM DoS

Virtual machine's VNC server infinite loop...

Qemu和KVM VNC服务器远程拒绝服务漏洞

BUGTRAQ ID: 32910 QEMU和KVM都是开放源码的模拟器软件。 Qemu和KVM的VNC服务器在处理特制的报文时可能出现死循环，导致拒绝服务的情况。 vnc.c文件的protocolclientmsg函数负责处理入站的VNC低层消息，以下是有漏洞的代码段： /----------- vnc.c 1185: static int protocolclientmsgVncState vs, uint8t data, sizet len 1186: 1187: int i; 1188: uint16t limit; 1189: 1190: switch data0...

CORE-2008-1210: Qemu and KVM VNC server remote DoS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Qemu and KVM VNC server remote DoS 1. Advisory Information Title: Qemu and KVM VNC server remote DoS Advisory ID: CORE-2008-1210 Advisory URL:...

QEMU 0.9 KVM 3679 - VNC Server Remote Denial of Service

QEMU 0.9 KVM 3679 - VNC Server Remote Denial of Service source: https://www.securityfocus.com/bid/32910/info QEMU and KVM are prone to a remote denial-of-service vulnerability that affects the included VNC server. Attackers can exploit this issue to create a denial-of-service condition. The...

QEMU 0.9 / KVM 36/79 - VNC Server Remote Denial of Service

source: https://www.securityfocus.com/bid/32910/info QEMU and KVM are prone to a remote denial-of-service vulnerability that affects the included VNC server. Attackers can exploit this issue to create a denial-of-service condition. The following are vulnerable: QEMU 0.9.1 and prior KVM-79 and pri...

[SECURITY] Fedora 10 Update: kvm-74-6.fc10

KVM for Kernel-based Virtual Machine is a full virtualization solution for Linux on x86 hardware. Using KVM, one can run multiple virtual machines running unmodified Linux or Windows images. Each virtual machine has private virtualized hardware: a network card, disk, graphics adapter, etc...

[SECURITY] Fedora 8 Update: kvm-60-7.fc8

KVM for Kernel-based Virtual Machine is a full virtualization solution for Linux on x86 hardware. Using KVM, one can run multiple virtual machines running unmodified Linux or Windows images. Each virtual machine has private virtualized hardware: a network card, disk, graphics adapter, etc...

Fedora 8 : kvm-60-7.fc8 (2008-9556)

This bug was reopened, since it was found out that it is still biting us. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

[SECURITY] Fedora 8 Update: kvm-60-6.fc8

KVM for Kernel-based Virtual Machine is a full virtualization solution for Linux on x86 hardware. Using KVM, one can run multiple virtual machines running unmodified Linux or Windows images. Each virtual machine has private virtualized hardware: a network card, disk, graphics adapter, etc...

[SECURITY] Fedora 9 Update: kvm-65-7.fc9

KVM for Kernel-based Virtual Machine is a full virtualization solution for Linux on x86 hardware. Using KVM, one can run multiple virtual machines running unmodified Linux or Windows images. Each virtual machine has private virtualized hardware: a network card, disk, graphics adapter, etc...

Fedora 9 : kvm-65-7.fc9 (2008-4386)

Tue May 27 2008 Glauber Costa - 65-7.fc9 - Fix the build - Tue May 27 2008 Glauber Costa - 65-6.fc9 - Fix Cirrus heap overflow vulnerability 448525 - Fri May 23 2008 Daniel P. Berrange - 65-5.fc9 - Put PTY in rawmode - Tue May 20 2008 Mark McLoughlin - 65-4.fc9 - Re-enable patch to fix -kernel...

DTSA-133-1 kvm - multiple vulnerabilities

Bulletin has no description...

KVM阻拦设备后端本地安全绕过漏洞

BUGTRAQ ID: 28001 CNCAN ID:CNCAN-2008022802 KVM是一款内核虚拟机。 KVM相关的阻拦设备驱动存在安全问题，本地攻击者可以利用漏洞绕过本地安全，访问虚拟环境外的内存信息，也可以写任意主机内存地址使主机崩溃。 当阻拦设备由客户端提交读或写请求时，没有对请求是否属于后端支持范围内的进行任何检查，这允许客户端读、写QEMU中的任意内存地址，通过QEMU来控制系统，逃脱模拟和虚拟的限制。 RedHat Fedora 8 0 RedHat Fedora 7 0 Qumranet KVM 36 可参考如下安全公告获得补丁信息：...

[SECURITY] Fedora 7 Update: kvm-36-8.fc7

KVM for Kernel-based Virtual Machine is a full virtualization solution for Linux on x86 hardware. Using KVM, one can run multiple virtual machines running unmodified Linux or Windows images. Each virtual machine has private virtualized hardware: a network card, disk, graphics adapter, etc...

Fedora 7 : kvm-36-8.fc7 (2008-1973)

Ian Jackson discovered that accesses beyond end of qemu emulated disk devices can result in accesses to emulator's virtual memory space accesses and thus can allow user with sufficient privilege in guest root, as this would need modification to kernel's driver to break out of VM...

Fedora 8 : kvm-60-2.fc8 (2008-1993)

Ian Jackson discovered that accesses beyond end of qemu emulated disk devices can result in accesses to emulator's virtual memory space accesses and thus can allow user with sufficient privilege in guest root, as this would need modification to kernel's driver to break out of VM...

Avocent KVM Over IP Switch Detection

The remote host is an Avocent KVM over IP switch that provides for control of connected servers and devices. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid29923; scriptversion"1.12"; scriptnameenglish:"Avocent KVM Over IP Switch Detection"; scriptsummaryenglish:"Loo...

Avocent KVM Appliance Detection

Binary data 4244.prm...

CVE-2007-1322

QEMU 0.8.2 allows local users to halt a virtual machine by executing the icebp instruction...

Mandrake Linux Security Advisory : kernel (MDKSA-2007:078)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : When SELinux hooks are enabled, the kernel could allow a local user to cause a DoS crash via a malformed file stream that triggers a NULL pointer derefernece CVE-2006-6056. Multiple buffer overflows in the 1 read and 2...