Debian: Security Advisory (DSA-2241-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for qemu-kvm USN-1177-1

Ubuntu Update for Linux kernel vulnerabilities USN-1177-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11771.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for qemu-kvm USN-1177-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net Thi...

Ubuntu: Security Advisory (USN-1177-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SystemTap "staprun"权限提升安全漏洞

CVE ID: CVE-2011-2502 QEMU是一款开放源码的模拟器软件。 QEMU KVM在-runas参数的实现上存在本地安全限制绕过漏洞，本地攻击者可利用此漏洞绕过安全限制并获取某些文件的非法读写访问权限。 staprun程序没有正确限制模块搜索路径，可通过用户空间搜索和恶意模块搜索路径提升权限。 SystemTap SystemTap 1.x 厂商补丁： SystemTap --------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://sourceware.org/systemtap/...

Ubuntu 10.04 LTS / 10.10 / 11.04 : qemu-kvm vulnerability (USN-1177-1)

Andrew Griffiths discovered that QEMU did not correctly drop privileges when using the 'runas' argument. Under certain circumstances a local attacker could exploit this to escalate privileges. Note that Tenable Network Security has extracted the preceding description block directly from the Ubunt...

USN-1177-1: QEMU vulnerability

Andrew Griffiths discovered that QEMU did not correctly drop privileges when using the 'runas' argument. Under certain circumstances a local attacker could exploit this to escalate privileges...

(RHSA-2011:1090) Moderate: rhev-hypervisor security and bug fix update

The rhev-hypervisor package provides a Red Hat Enterprise Virtualization Hypervisor ISO disk image. The Red Hat Enterprise Virtualization Hypervisor is a dedicated Kernel-based Virtual Machine KVM hypervisor. It includes everything necessary to run and manage virtual machines: A subset of the Red...

[SECURITY] [DSA 2282-1] qemu-kvm security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2282-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 25, 2011 http://www.debian.org/security/faq -...

kvm code execution

virtio commands processing code execution...

Debian DSA-2282-1 : qemu-kvm - several vulnerabilities

Two vulnerabilities have been discovered in KVM, a solution for full virtualization on x86 hardware : - CVE-2011-2212 Nelson Elhage discovered a buffer overflow in the virtio subsystem, which could lead to denial of service or privilege escalation. - CVE-2011-2527 Andrew Griffiths discovered that...

[SECURITY] [DSA 2282-1] qemu-kvm security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2282-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 25, 2011 http://www.debian.org/security/faq -...

DSA-2282-1 qemu-kvm - several

Bulletin has no description...

kvm (important)

A privileged guest user could cause a buffer overflow in the virtio subsystem of the host, therefore crashing the guest or potentially execute arbitrary code on the host CVE-2011-2212, CVE-2011-2512...

SuSE 11.1 Security Update : KVM (SAT Patch Number 4814)

A privileged guest user could cause a buffer overflow in the virtio subsystem of the host, therefore crashing the guest or potentially execute arbitrary code on the host. CVE-2011-2212 / CVE-2011-2512 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

Ubuntu Update for qemu-kvm USN-1165-1

Ubuntu Update for Linux kernel vulnerabilities USN-1165-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11651.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for qemu-kvm USN-1165-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net Thi...

Ubuntu: Security Advisory (USN-1165-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 10.04 LTS / 10.10 / 11.04 : qemu-kvm vulnerabilities (USN-1165-1)

Nelson Elhage discoverd that QEMU did not properly validate certain virtqueue requests from the guest. An attacker could exploit this to cause a denial of service of the guest or possibly execute code with the privileges of the user invoking the program. CVE-2011-2212 Stefan Hajnoczi discovered...

[SECURITY] [DSA 2270-1] qemu-kvm security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2270-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 01, 2011 http://www.debian.org/security/faq -...

Important: Red Hat Security Advisory: qemu-kvm security and bug fix update

Updated qemu-kvm packages that fix two security issues and one bug are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

PT-2012-1059 · Qemu +1 · Qemu-Kvm +1

Name of the Vulnerable Software and Affected Versions: qemu-kvm version 0.14.0 and earlier Description: The issue is related to a buffer overflow in the virtio subsystem, allowing privileged guest users to cause a denial of service or gain privileges via a crafted indirect descriptor. This is...