Lucene search
+L

7194 matches found

osv_ubuntu
osv_ubuntu
•added 2015/04/01 2:59 p.m.•13 views

UBUNTU-CVE-2015-2752

The XENDOMCTLmemorymapping hypercall in Xen 3.2.x through 4.5.x, when using a PCI passthrough device, is not preemptible, which allows local x86 HVM domain users to cause a denial of service host CPU consumption via a crafted request to the device model qemu-dm...

4.9CVSS7.2AI score0.00453EPSS
SaveExploits0References3
Prion
Prion
•added 2015/04/01 2:59 p.m.•33 views

Cross site request forgery (csrf)

The XENDOMCTLmemorymapping hypercall in Xen 3.2.x through 4.5.x, when using a PCI passthrough device, is not preemptible, which allows local x86 HVM domain users to cause a denial of service host CPU consumption via a crafted request to the device model qemu-dm...

4.9CVSS6.4AI score0.00453EPSS
SaveExploits0References9Affected Software2
Debian CVE
Debian CVE
•added 2015/04/01 2:00 p.m.•66 views

CVE-2015-2752

The XENDOMCTLmemorymapping hypercall in Xen 3.2.x through 4.5.x, when using a PCI passthrough device, is not preemptible, which allows local x86 HVM domain users to cause a denial of service host CPU consumption via a crafted request to the device model qemu-dm...

4.9CVSS5.8AI score0.00453EPSS
SaveExploits0
Cvelist
Cvelist
•added 2015/04/01 2:00 p.m.•53 views

CVE-2015-2752

The XENDOMCTLmemorymapping hypercall in Xen 3.2.x through 4.5.x, when using a PCI passthrough device, is not preemptible, which allows local x86 HVM domain users to cause a denial of service host CPU consumption via a crafted request to the device model qemu-dm...

5.4AI score0.00453EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2015/04/01 12:00 a.m.•4 views

PT-2015-5868

Name of the Vulnerable Software and Affected Versions Xen versions 3.2.x through 4.5.x Description The issue concerns the XEN DOMCTL memory mapping hypercall in Xen, which is not preemptible when using a PCI passthrough device. This could allow local users of the x86 HVM domain to cause a denial ...

4.9CVSS0.00453EPSS
SaveExploits0References135
Xen Project
Xen Project
•added 2015/03/31 12:00 p.m.•89 views

Long latency MMIO mapping operations are not preemptible

ISSUE DESCRIPTION The XENDOMCTLmemorymapping hypercall allows long running operations without implementing preemption. This hypercall is used by the device model as part of the emulation associated with configuration of PCI devices passed through to HVM guests and is therefore indirectly exposed ...

4.9CVSS6.4AI score0.00453EPSS
SaveExploits0Affected Software1
FreeBSD
FreeBSD
•added 2015/03/31 12:00 a.m.•39 views

xen-kernel and xen-tools -- Long latency MMIO mapping operations are not preemptible

The Xen Project reports: The XENDOMCTLmemorymapping hypercall allows long running operations without implementing preemption. This hypercall is used by the device model as part of the emulation associated with configuration of PCI devices passed through to HVM guests and is therefore indirectly...

4.9CVSS6.6AI score0.00453EPSS
SaveExploits0References1
Fedora
Fedora
•added 2015/03/19 6:42 p.m.•42 views

[SECURITY] Fedora 20 Update: mapserver-6.2.2-1.fc20

Mapserver is an internet mapping program that converts GIS data to map images in real time. With appropriate interface pages, Mapserver can provide an interactive internet map based on custom GIS data...

6.8CVSS2.9AI score0.0222EPSS
SaveExploits1
Fedora
Fedora
•added 2015/03/19 6:39 p.m.•61 views

[SECURITY] Fedora 21 Update: mapserver-6.2.2-1.fc21

Mapserver is an internet mapping program that converts GIS data to map images in real time. With appropriate interface pages, Mapserver can provide an interactive internet map based on custom GIS data...

6.8CVSS2.9AI score0.0222EPSS
SaveExploits1
RedHat Linux
RedHat Linux
•added 2015/03/17 2:39 p.m.•11 views

kernel: integer overflow in fb_mmap

An integer overflow flaw was found in the way the Linux kernel's Frame Buffer device implementation mapped kernel memory to user space via the mmap syscall. A local user able to access a frame buffer device file /dev/fb could possibly use this flaw to escalate their privileges on the system...

7.8CVSS6.2AI score0.03212EPSS
SaveExploits1References5
osv_debian
osv_debian
•added 2015/03/16 10:59 a.m.•16 views

DEBIAN-CVE-2015-1593

The stack randomization feature in the Linux kernel before 3.19.1 on 64-bit platforms uses incorrect data types for the results of bitwise left-shift operations, which makes it easier for attackers to bypass the ASLR protection mechanism by predicting the address of the top of the stack, related ...

5CVSS7.5AI score0.03814EPSS
SaveExploits1References1
Veeam
Veeam
•added 2015/03/13 12:00 a.m.•24 views

How to Clone a Job and Map Existing Backups to Clone

Feature License Requirement Consider the following: Starting in Veeam Backup & Replication 12.1 build 12.1.0.2131 , the job cloning functionality is available for all types of licenses. Prior to Veeam Backup & Replication 12.1 build 12.1.0.2131 , the job cloning functionality required an Enterpri...

7AI score
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
•added 2015/03/13 12:00 a.m.•265 views

CentOS 6 : kernel (CESA-2015:0674)

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

7.8CVSS6.1AI score0.05489EPSS
SaveExploits4References5
RedHat Linux
RedHat Linux
•added 2015/03/11 3:27 p.m.•19 views

kernel: kvm: excessive pages un-pinning in kvm_iommu_map error path

It was found that the fix for CVE-2014-3601 was incomplete: the Linux kernel's kvmiommumappages function still handled IOMMU mapping failures incorrectly. A privileged user in a guest with an assigned host device could use this flaw to crash the host...

7.8CVSS6.6AI score0.01168EPSS
SaveExploits2References4
RedHat Linux
RedHat Linux
•added 2015/03/11 3:27 p.m.•89 views

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

7.8CVSS6.5AI score0.05489EPSS
SaveExploits4References5
RedHat Linux
RedHat Linux
•added 2015/02/11 8:36 p.m.•15 views

Security: Wrong security context loaded when using SAML2 STS Login Module

It was found that when processing undefined security domains, the org.jboss.security.plugins.mapping.JBossMappingManager implementation would fall back to the default security domain if it was available. A user with valid credentials in the defined default domain, with a role that is valid in the...

3.5CVSS5.7AI score0.01739EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2015/02/11 8:18 p.m.•10 views

Security: Wrong security context loaded when using SAML2 STS Login Module

It was found that when processing undefined security domains, the org.jboss.security.plugins.mapping.JBossMappingManager implementation would fall back to the default security domain if it was available. A user with valid credentials in the defined default domain, with a role that is valid in the...

3.5CVSS5.7AI score0.01739EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2015/02/11 8:16 p.m.•9 views

Security: Wrong security context loaded when using SAML2 STS Login Module

It was found that when processing undefined security domains, the org.jboss.security.plugins.mapping.JBossMappingManager implementation would fall back to the default security domain if it was available. A user with valid credentials in the defined default domain, with a role that is valid in the...

3.5CVSS5.7AI score0.01739EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2015/01/28 7:02 p.m.•14 views

Kernel: mm/shmem: denial of service

A race condition flaw was found in the way the Linux kernel's mmap2, madvise2, and fallocate2 system calls interacted with each other while operating on virtual memory file system files. A local user could use this flaw to cause a denial of service...

4.7CVSS6.5AI score0.0044EPSS
SaveExploits0References4
securityvulns
securityvulns
•added 2014/12/11 12:00 a.m.•102 views

[SECURITY] [DSA 3093-1] linux security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3093-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 08, 2014 http://www.debian.org/security/faq -...

6.1CVSS0.9AI score0.0523EPSS
SaveExploits2
Rows per page
Query Builder