USN-2681-1 linux vulnerabilities

A flaw was discovered in the user space memory copying for the pipe iovecs in the Linux kernel. An unprivileged local user could exploit this flaw to cause a denial of service system crash or potentially escalate their privileges. CVE-2015-1805 A flaw was discovered in the kvm kernel virtual...

Moderate: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Updated kernel packages that fix multiple security issues, address several hundred bugs, and add numerous enhancements are now available as part of the ongoing support and maintenance of Red Hat Enterprise Linux version 6. This is the seventh regular update. Red Hat Product Security has rated thi...

Linux kvm_apic_has_events() function null pointer reference vulnerability

Linux Kernel is an open source operating system. A null pointer reference vulnerability in the Linux Kernel kvmapichasevents function allows users with access to /dev/kvm to crash the system...

SUSE-SU-2015:1455-1 Security update for kvm

kvm was updated to fix one security issue. This security issue was fixed: - CVE-2015-5154: Host code execution via IDE subsystem CD-ROM bsc938344...

Scientific Linux Security Update : kvm on SL5.x x86_64 (20150625)

A flaw was found in the way QEMU's AMD PCnet Ethernet emulation handled multi-TMD packets with a length above 4096 bytes. A privileged guest user in a guest with an AMD PCNet ethernet card enabled could potentially use this flaw to execute arbitrary code on the host with the privileges of the...

CentOS Update for kmod-kvm CESA-2015:1189 centos5

Check the version of kmod-kvm SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882211";...

Authentication flaw

IBM PowerVC Standard Edition 1.2.2.1 through 1.2.2.2 does not require authentication for access to the Python interpreter with nova credentials, which allows KVM guest OS users to discover certain PowerVC credentials and bypass intended access restrictions via unspecified Python code...

CVE-2015-1950

IBM PowerVC Standard Edition 1.2.2.1 through 1.2.2.2 does not require authentication for access to the Python interpreter with nova credentials, which allows KVM guest OS users to discover certain PowerVC credentials and bypass intended access restrictions via unspecified Python code...

CVE-2015-1950

IBM PowerVC Standard Edition 1.2.2.1 through 1.2.2.2 does not require authentication for access to the Python interpreter with nova credentials, which allows KVM guest OS users to discover certain PowerVC credentials and bypass intended access restrictions via unspecified Python code...

CVE-2015-1950

CVE-2015-1950 affects IBM PowerVC Standard Edition 1.2.2.1–1.2.2.2, where access to the Python interpreter with nova credentials is not authenticated. This allows KVM guest OS users to discover certain PowerVC credentials and bypass intended access restrictions via unspecified Python code. The vu...

SUSE SLED11 / SLES11 Security Update : KVM (SUSE-SU-2015:1152-1)

KVM was updated to fix two security issues : CVE-2015-3209: Heap overflow in qemu pcnet controller allowing guest to host escape. bsc932770 CVE-2015-4037: Predictable directory names for smb configuration. bsc932267 Note that Tenable Network Security has extracted the preceding description block...

kmod, kvm security update

CentOS Errata and Security Advisory CESA-2015:1189 Updated kvm packages that fix one security issue are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which...

Oracle Linux 5 : kvm (ELSA-2015-1189)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-1189 advisory. kvm-83-273.0.1.el5 - Added kvm-add-oracle-workaround-for-libvirt-bug.patch - Added kvm-Introduce-oel-machine-type.patch kvm-83.273.el5 -...

CentOS 5 : kvm (CESA-2015:1189)

Updated kvm packages that fix one security issue are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from t...

RHEL 5 : kvm (RHSA-2015:1189)

Updated kvm packages that fix one security issue are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from t...

Important: Red Hat Security Advisory: kvm security update

Updated kvm packages that fix one security issue are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from t...

kvm security update

kvm-83-273.0.1.el5 - Added kvm-add-oracle-workaround-for-libvirt-bug.patch - Added kvm-Introduce-oel-machine-type.patch kvm-83.273.el5 - kvm-pcnet-Properly-handle-TX-requests-during-Link-Fail.patch bz1225896 - kvm-pcnet-fix-Negative-array-index-read.patch bz1225896 -...

Linux Kernel KVM 'kvm_apic_has_events()' Denial of Service Vulnerability

The Linux kernel is the kernel used by the open source operating system Linux. Linux Kernel KVM has a denial of service vulnerability in the implementation of the 'kvmapichasevents' function. Allowing a remote attacker to exploit this vulnerability could crash the system...

CVE-2015-4692

The kvmapichasevents function in arch/x86/kvm/lapic.h in the Linux kernel through 4.1.3 allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact by leveraging /dev/kvm access for an ioctl call...

UBUNTU-CVE-2015-4692

The kvmapichasevents function in arch/x86/kvm/lapic.h in the Linux kernel through 4.1.3 allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact by leveraging /dev/kvm access for an ioctl call...