Heap overflow

Heap-based buffer overflow in the Cirrus VGA implementation in 1 KVM before kvm-82 and 2 QEMU on Debian GNU/Linux and Ubuntu might allow local users to gain privileges by using the VNC console for a connection, aka the LGD-54XX "bitblt" heap overflow. NOTE: this issue exists because of an incorre...

CVE-2008-4539

The connected documents describe a heap-based buffer overflow in the Cirrus VGA emulator (hw/display/cirrus_vga.c) of QEMU, affecting versions prior to a certain fix. The CVE-2014-8106 entry specifies Cirrus VGA heap overflow in QEMU before 2.2.0 and notes it exists due to an incomplete fix for C...

CVE-2008-4539

Heap-based buffer overflow in the Cirrus VGA implementation in 1 KVM before kvm-82 and 2 QEMU on Debian GNU/Linux and Ubuntu might allow local users to gain privileges by using the VNC console for a connection, aka the LGD-54XX "bitblt" heap overflow. NOTE: this issue exists because of an incorre...

Fedora 9 : kvm-65-15.fc9 (2008-11705)

---------------------------------------------------------------------- ---------- ChangeLog : - Mon Dec 22 2008 Glauber Costa - 65-15.fc9 - Fixed CVE-2008-2382. - Thu Dec 4 2008 Glauber Costa - 65-14.fc9 - Fixed bug that corrupted gnome-panel 474702 - Tue Dec 2 2008 Glauber Costa - 65-12.fc9 -...

[SECURITY] Fedora 10 Update: kvm-74-10.fc10

KVM for Kernel-based Virtual Machine is a full virtualization solution for Linux on x86 hardware. Using KVM, one can run multiple virtual machines running unmodified Linux or Windows images. Each virtual machine has private virtualized hardware: a network card, disk, graphics adapter, etc...

[SECURITY] Fedora 9 Update: kvm-65-15.fc9

KVM for Kernel-based Virtual Machine is a full virtualization solution for Linux on x86 hardware. Using KVM, one can run multiple virtual machines running unmodified Linux or Windows images. Each virtual machine has private virtualized hardware: a network card, disk, graphics adapter, etc...

CVE-2008-2382

The protocolclientmsg function in vnc.c in the VNC server in 1 Qemu 0.9.1 and earlier and 2 KVM kvm-79 and earlier allows remote attackers to cause a denial of service infinite loop via a certain message...

CVE-2008-2382

The protocolclientmsg function in vnc.c in the VNC server in 1 Qemu 0.9.1 and earlier and 2 KVM kvm-79 and earlier allows remote attackers to cause a denial of service infinite loop via a certain message...

CVE-2008-2382

The protocolclientmsg function in vnc.c in the VNC server in 1 Qemu 0.9.1 and earlier and 2 KVM kvm-79 and earlier allows remote attackers to cause a denial of service infinite loop via a certain message...

CVE-2008-2382

CVE-2008-2382 relates to a remote DoS in the VNC server component of Qemu (0.9.1 and earlier) and KVM (kvm-79 and earlier). The vulnerability stems from protocol_client_msg handling in vnc.c, where a crafted VNC message (notably with data starting with 0x02) can trigger an infinite loop, causing ...

[SECURITY] Fedora 9 Update: kvm-65-15.fc9

KVM for Kernel-based Virtual Machine is a full virtualization solution for Linux on x86 hardware. Using KVM, one can run multiple virtual machines running unmodified Linux or Windows images. Each virtual machine has private virtualized hardware: a network card, disk, graphics adapter, etc...

CVE-2008-2382

The protocolclientmsg function in vnc.c in the VNC server in 1 Qemu 0.9.1 and earlier and 2 KVM kvm-79 and earlier allows remote attackers to cause a denial of service infinite loop via a certain message...

Qemu / KVM DoS

Virtual machine's VNC server infinite loop...

Qemu和KVM VNC服务器远程拒绝服务漏洞

BUGTRAQ ID: 32910 QEMU和KVM都是开放源码的模拟器软件。 Qemu和KVM的VNC服务器在处理特制的报文时可能出现死循环，导致拒绝服务的情况。 vnc.c文件的protocolclientmsg函数负责处理入站的VNC低层消息，以下是有漏洞的代码段： /----------- vnc.c 1185: static int protocolclientmsgVncState vs, uint8t data, sizet len 1186: 1187: int i; 1188: uint16t limit; 1189: 1190: switch data0...

CORE-2008-1210: Qemu and KVM VNC server remote DoS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Qemu and KVM VNC server remote DoS 1. Advisory Information Title: Qemu and KVM VNC server remote DoS Advisory ID: CORE-2008-1210 Advisory URL:...

QEMU 0.9 KVM 3679 - VNC Server Remote Denial of Service

QEMU 0.9 KVM 3679 - VNC Server Remote Denial of Service source: https://www.securityfocus.com/bid/32910/info QEMU and KVM are prone to a remote denial-of-service vulnerability that affects the included VNC server. Attackers can exploit this issue to create a denial-of-service condition. The...

QEMU 0.9 / KVM 36/79 - VNC Server Remote Denial of Service

source: https://www.securityfocus.com/bid/32910/info QEMU and KVM are prone to a remote denial-of-service vulnerability that affects the included VNC server. Attackers can exploit this issue to create a denial-of-service condition. The following are vulnerable: QEMU 0.9.1 and prior KVM-79 and pri...

[SECURITY] Fedora 10 Update: kvm-74-6.fc10

KVM for Kernel-based Virtual Machine is a full virtualization solution for Linux on x86 hardware. Using KVM, one can run multiple virtual machines running unmodified Linux or Windows images. Each virtual machine has private virtualized hardware: a network card, disk, graphics adapter, etc...

[SECURITY] Fedora 8 Update: kvm-60-7.fc8

KVM for Kernel-based Virtual Machine is a full virtualization solution for Linux on x86 hardware. Using KVM, one can run multiple virtual machines running unmodified Linux or Windows images. Each virtual machine has private virtualized hardware: a network card, disk, graphics adapter, etc...

Fedora 8 : kvm-60-7.fc8 (2008-9556)

This bug was reopened, since it was found out that it is still biting us. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...