8804 matches found
Authentication flaw
IBM PowerVC Standard Edition 1.2.2.1 through 1.2.2.2 does not require authentication for access to the Python interpreter with nova credentials, which allows KVM guest OS users to discover certain PowerVC credentials and bypass intended access restrictions via unspecified Python code...
CVE-2015-1950
IBM PowerVC Standard Edition 1.2.2.1 through 1.2.2.2 does not require authentication for access to the Python interpreter with nova credentials, which allows KVM guest OS users to discover certain PowerVC credentials and bypass intended access restrictions via unspecified Python code...
CVE-2015-1950
IBM PowerVC Standard Edition 1.2.2.1 through 1.2.2.2 does not require authentication for access to the Python interpreter with nova credentials, which allows KVM guest OS users to discover certain PowerVC credentials and bypass intended access restrictions via unspecified Python code...
CVE-2015-1950
CVE-2015-1950 affects IBM PowerVC Standard Edition 1.2.2.1–1.2.2.2, where access to the Python interpreter with nova credentials is not authenticated. This allows KVM guest OS users to discover certain PowerVC credentials and bypass intended access restrictions via unspecified Python code. The vu...
SUSE SLED11 / SLES11 Security Update : KVM (SUSE-SU-2015:1152-1)
KVM was updated to fix two security issues : CVE-2015-3209: Heap overflow in qemu pcnet controller allowing guest to host escape. bsc932770 CVE-2015-4037: Predictable directory names for smb configuration. bsc932267 Note that Tenable Network Security has extracted the preceding description block...
kmod, kvm security update
CentOS Errata and Security Advisory CESA-2015:1189 Updated kvm packages that fix one security issue are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which...
RHEL 5 : kvm (RHSA-2015:1189)
Updated kvm packages that fix one security issue are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from t...
Oracle Linux 5 : kvm (ELSA-2015-1189)
The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-1189 advisory. kvm-83-273.0.1.el5 - Added kvm-add-oracle-workaround-for-libvirt-bug.patch - Added kvm-Introduce-oel-machine-type.patch kvm-83.273.el5 -...
CentOS 5 : kvm (CESA-2015:1189)
Updated kvm packages that fix one security issue are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from t...
Important: Red Hat Security Advisory: kvm security update
Updated kvm packages that fix one security issue are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from t...
kvm security update
kvm-83-273.0.1.el5 - Added kvm-add-oracle-workaround-for-libvirt-bug.patch - Added kvm-Introduce-oel-machine-type.patch kvm-83.273.el5 - kvm-pcnet-Properly-handle-TX-requests-during-Link-Fail.patch bz1225896 - kvm-pcnet-fix-Negative-array-index-read.patch bz1225896 -...
Linux Kernel KVM 'kvm_apic_has_events()' Denial of Service Vulnerability
The Linux kernel is the kernel used by the open source operating system Linux. Linux Kernel KVM has a denial of service vulnerability in the implementation of the 'kvmapichasevents' function. Allowing a remote attacker to exploit this vulnerability could crash the system...
CVE-2015-4692
The kvmapichasevents function in arch/x86/kvm/lapic.h in the Linux kernel through 4.1.3 allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact by leveraging /dev/kvm access for an ioctl call...
Debian DLA-249-1 : qemu-kvm security update (Venom)
A vulnerability was discovered in the qemu virtualisation solution : CVE-2015-3456 Jason Geffner discovered a buffer overflow in the emulated floppy disk drive, resulting in the potential execution of arbitrary code. Despite the end-of-life of qemu-kvm support in the old-oldstable distribution...
UBUNTU-CVE-2015-4692
The kvmapichasevents function in arch/x86/kvm/lapic.h in the Linux kernel through 4.1.3 allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact by leveraging /dev/kvm access for an ioctl call...
[SECURITY] [DLA 249-1] qemu-kvm security update
Package : qemu-kvm Version : 0.12.5+dfsg-5+squeeze11 CVE ID : CVE-2015-3456 A vulnerability was discovered in the qemu virtualisation solution: CVE-2015-3456 Jason Geffner discovered a buffer overflow in the emulated floppy disk drive, resulting in the potential execution of arbitrary code. Despi...
DLA-249-1 qemu-kvm - security update
Bulletin has no description...
Debian DSA-3285-1 : qemu-kvm - security update
Several vulnerabilities were discovered in qemu-kvm, a full virtualization solution on x86 hardware. - CVE-2015-3209 Matt Tait of Google's Project Zero security team discovered a flaw in the way QEMU's AMD PCnet Ethernet emulation handles multi-TMD packets with a length above 4096 bytes. A...
RHEL 6 : qemu-kvm-rhev (RHSA-2015:1088)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2015:1088 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on AMD64 and Intel 64 systems. The qemu-kvm-rhev package provides the...