8783 matches found
kernel: kvm: after free issue with the handling of MSR_KVM_SYSTEM_TIME
Use-after-free vulnerability in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 allows guest OS users to cause a denial of service host OS memory corruption or possibly have unspecified other impact via a crafted application that triggers use of a guest physical address GPA in 1 movable or 2...
Important: Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update
An updated rhev-hypervisor6 package that fixes several security issues and various bugs is now available. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
kernel: kvm: out-of-bounds access in ioapic indirect register reads
The ioapicreadindirect function in virt/kvm/ioapic.c in the Linux kernel through 3.8.4 does not properly handle a certain combination of invalid IOAPICREGSELECT and IOAPICREGWINDOW operations, which allows guest OS users to obtain sensitive information from host OS memory or cause a denial of...
kernel security and bug fix update
2.6.32-358.6.1 - virt kvm: accept unaligned MSRKVMSYSTEMTIME writes Petr Matousek 917020 917021 CVE-2013-1796 - char tty: hold lock across tty buffer finding and buffer filling Prarit Bhargava 928686 901780 - net tcp: fix for zero packetsinflight was too broad Thomas Graf 927309 920794 - net tcp:...
Ubuntu 10.04 LTS : linux vulnerabilities (USN-1805-1)
Mathias Krause discovered an information leak in the Linux kernel's getsockname implementation for Logical Link Layer llc sockets. A local user could exploit this flaw to examine some of the kernel's stack memory. CVE-2012-6542 Mathias Krause discovered information leaks in the Linux kernel's...
Mandriva Linux Security Advisory : x11-driver-video-qxl (MDVSA-2013:138)
Updated x11-driver-video-qxl package fixes security vulnerability : A flaw was found in the way the host's qemu-kvm qxl driver and the guest's X.Org qxl driver interacted when a SPICE connection terminated. A user able to initiate a SPICE connection to a guest could use this flaw to make the gues...
USN-1805-1: Linux kernel vulnerabilities
Mathias Krause discovered an information leak in the Linux kernel's getsockname implementation for Logical Link Layer llc sockets. A local user could exploit this flaw to examine some of the kernel's stack memory. CVE-2012-6542 Mathias Krause discovered information leaks in the Linux kernel's...
CentOS Update for kmod-kvm CESA-2013:0727 centos5
Check for the Version of kmod-kvm OpenVAS Vulnerability Test CentOS Update for kmod-kvm CESA-2013:0727 centos5 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
CentOS Update for kmod-kvm CESA-2013:0727 centos5
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CentOS 5 : kvm (CESA-2013:0727)
Updated kvm packages that fix three security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
kmod, kvm security update
CentOS Errata and Security Advisory CESA-2013:0727 Updated kvm packages that fix three security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base...
RHEL 5 : kvm (RHSA-2013:0727)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:0727 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on AMD64 and Intel 64 systems. KVM is a Linux kernel module bui...
Scientific Linux Security Update : kvm on SL5.x x86_64 (20130409)
A flaw was found in the way KVM handled guest time updates when the buffer the guest registered by writing to the MSRKVMSYSTEMTIME machine state register MSR crossed a page boundary. A privileged guest user could use this flaw to crash the host or, potentially, escalate their privileges, allowing...
Important: Red Hat Security Advisory: kvm security update
Updated kvm packages that fix three security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
Linux Kernel KVM 拒绝服务漏洞(CVE-2013-1798)
BUGTRAQ ID: 58604 CVECAN ID: CVE-2013-1798 Linux Kernel是Linux操作系统的内核。 如果客户端指定了带有无效值的IOAPICREGSELECT，然后读取IOAPICREGWINDOW，KVM就不会正确验证该请求。ioapicreadindirect包含了ASSERTredirindex IOAPICNUMPINS，但ASSERT在非调试build中不起作用。在最近版本中，读取无效内存会造成内核崩溃，在较早版本内，会允许客户端读取较大范围的主机内存。攻击者可利用此漏洞触发内核崩溃，拒绝服务合法用户。 0 Linux kernel 3....
Linux Kernel KVM 缓冲区溢出漏洞(CVE-2013-1796)
BUGTRAQ ID: 58607 CVECAN ID: CVE-2013-1796 Linux Kernel是Linux操作系统的内核。 在处理MSRKVMSYSTEMTIME时，KVM存在缓冲区溢出漏洞，可造成破坏主机内核内存。 0 Linux kernel 3.x Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kernel.org/...
USN-1778-1: Linux kernel (OMAP4) vulnerabilities
Andrew Jones discovered a flaw with the xeniret function in Linux kernel's Xen virtualizeation. In the 32-bit Xen paravirt platform an unprivileged guest OS user could exploit this flaw to cause a denial of service crash the system or gain guest OS privilege. CVE-2013-0228 A flaw was reported in...
DEBIAN-CVE-2013-1797
Use-after-free vulnerability in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 allows guest OS users to cause a denial of service host OS memory corruption or possibly have unspecified other impact via a crafted application that triggers use of a guest physical address GPA in 1 movable or 2...
CVE-2013-1798
The CVE-2013-1798 entry concerns the Linux kernel’s ioapic_read_indirect() in virt/kvm/ioapic.c up to version 3.8.4. A particular sequence of invalid IOAPIC_REG_SELECT/IOAPIC_REG_WINDOW operations can allow a privileged guest OS user to read sensitive host memory or trigger a host OOPS, per multi...
