Mandrake Security Advisory MDVSA-2009:009 (kvm)

The remote host is missing an update to kvm announced via advisory MDVSA-2009:009. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...

Core Security Technologies Advisory 2008.1210

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Qemu and KVM VNC server remote DoS 1. Advisory Information Title: Qemu and KVM VNC server remote DoS Advisory ID: CORE-2008-1210 Advisory URL:...

CVE-2008-4539

Heap-based buffer overflow in the Cirrus VGA implementation in 1 KVM before kvm-82 and 2 QEMU on Debian GNU/Linux and Ubuntu might allow local users to gain privileges by using the VNC console for a connection, aka the LGD-54XX "bitblt" heap overflow. NOTE: this issue exists because of an incorre...

CVE-2008-4539

Heap-based buffer overflow in the Cirrus VGA implementation in 1 KVM before kvm-82 and 2 QEMU on Debian GNU/Linux and Ubuntu might allow local users to gain privileges by using the VNC console for a connection, aka the LGD-54XX "bitblt" heap overflow. NOTE: this issue exists because of an incorre...

Heap overflow

Heap-based buffer overflow in the Cirrus VGA implementation in 1 KVM before kvm-82 and 2 QEMU on Debian GNU/Linux and Ubuntu might allow local users to gain privileges by using the VNC console for a connection, aka the LGD-54XX "bitblt" heap overflow. NOTE: this issue exists because of an incorre...

CVE-2008-4539

The connected documents describe a heap-based buffer overflow in the Cirrus VGA emulator (hw/display/cirrus_vga.c) of QEMU, affecting versions prior to a certain fix. The CVE-2014-8106 entry specifies Cirrus VGA heap overflow in QEMU before 2.2.0 and notes it exists due to an incomplete fix for C...

CVE-2008-4539

Heap-based buffer overflow in the Cirrus VGA implementation in 1 KVM before kvm-82 and 2 QEMU on Debian GNU/Linux and Ubuntu might allow local users to gain privileges by using the VNC console for a connection, aka the LGD-54XX "bitblt" heap overflow. NOTE: this issue exists because of an incorre...

Fedora 9 : kvm-65-15.fc9 (2008-11705)

---------------------------------------------------------------------- ---------- ChangeLog : - Mon Dec 22 2008 Glauber Costa - 65-15.fc9 - Fixed CVE-2008-2382. - Thu Dec 4 2008 Glauber Costa - 65-14.fc9 - Fixed bug that corrupted gnome-panel 474702 - Tue Dec 2 2008 Glauber Costa - 65-12.fc9 -...

[SECURITY] Fedora 10 Update: kvm-74-10.fc10

KVM for Kernel-based Virtual Machine is a full virtualization solution for Linux on x86 hardware. Using KVM, one can run multiple virtual machines running unmodified Linux or Windows images. Each virtual machine has private virtualized hardware: a network card, disk, graphics adapter, etc...

[SECURITY] Fedora 9 Update: kvm-65-15.fc9

KVM for Kernel-based Virtual Machine is a full virtualization solution for Linux on x86 hardware. Using KVM, one can run multiple virtual machines running unmodified Linux or Windows images. Each virtual machine has private virtualized hardware: a network card, disk, graphics adapter, etc...

CVE-2008-2382

The protocolclientmsg function in vnc.c in the VNC server in 1 Qemu 0.9.1 and earlier and 2 KVM kvm-79 and earlier allows remote attackers to cause a denial of service infinite loop via a certain message...

CVE-2008-2382

The protocolclientmsg function in vnc.c in the VNC server in 1 Qemu 0.9.1 and earlier and 2 KVM kvm-79 and earlier allows remote attackers to cause a denial of service infinite loop via a certain message...

CVE-2008-2382

The protocolclientmsg function in vnc.c in the VNC server in 1 Qemu 0.9.1 and earlier and 2 KVM kvm-79 and earlier allows remote attackers to cause a denial of service infinite loop via a certain message...

CVE-2008-2382

CVE-2008-2382 relates to a remote DoS in the VNC server component of Qemu (0.9.1 and earlier) and KVM (kvm-79 and earlier). The vulnerability stems from protocol_client_msg handling in vnc.c, where a crafted VNC message (notably with data starting with 0x02) can trigger an infinite loop, causing ...

[SECURITY] Fedora 9 Update: kvm-65-15.fc9

KVM for Kernel-based Virtual Machine is a full virtualization solution for Linux on x86 hardware. Using KVM, one can run multiple virtual machines running unmodified Linux or Windows images. Each virtual machine has private virtualized hardware: a network card, disk, graphics adapter, etc...

CVE-2008-2382

The protocolclientmsg function in vnc.c in the VNC server in 1 Qemu 0.9.1 and earlier and 2 KVM kvm-79 and earlier allows remote attackers to cause a denial of service infinite loop via a certain message...

Qemu / KVM DoS

Virtual machine's VNC server infinite loop...

CORE-2008-1210: Qemu and KVM VNC server remote DoS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Qemu and KVM VNC server remote DoS 1. Advisory Information Title: Qemu and KVM VNC server remote DoS Advisory ID: CORE-2008-1210 Advisory URL:...

Qemu和KVM VNC服务器远程拒绝服务漏洞

BUGTRAQ ID: 32910 QEMU和KVM都是开放源码的模拟器软件。 Qemu和KVM的VNC服务器在处理特制的报文时可能出现死循环，导致拒绝服务的情况。 vnc.c文件的protocolclientmsg函数负责处理入站的VNC低层消息，以下是有漏洞的代码段： /----------- vnc.c 1185: static int protocolclientmsgVncState vs, uint8t data, sizet len 1186: 1187: int i; 1188: uint16t limit; 1189: 1190: switch data0...

QEMU 0.9 / KVM 36/79 - VNC Server Remote Denial of Service

source: https://www.securityfocus.com/bid/32910/info QEMU and KVM are prone to a remote denial-of-service vulnerability that affects the included VNC server. Attackers can exploit this issue to create a denial-of-service condition. The following are vulnerable: QEMU 0.9.1 and prior KVM-79 and pri...