5887 matches found
CVE-2021-3656
A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB virtual machine control block provided by the L1 guest to spawn/handle a nested guest L2. Due to improper validation of the "virtext" field, this issue could allow a malicious...
Input validation
A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB virtual machine control block provided by the L1 guest to spawn/handle a nested guest L2. Due to improper validation of the "virtext" field, this issue could allow a malicious...
CVE-2021-3656
A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB virtual machine control block provided by the L1 guest to spawn/handle a nested guest L2. Due to improper validation of the "virtext" field, this issue could allow a malicious...
CVE-2021-3656
CVE-2021-3656 describes a flaw in the KVM hypervisor for AMD processors where the L1 guest can provide a VMCB with an improperly validated virt_ext field, allowing the L1 to disable VMLOAD/VMSAVE intercepts and VLS for the L2 guest. This enables the L2 guest to read/write portions of the host’s p...
CVE-2021-3656
A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB virtual machine control block provided by the L1 guest to spawn/handle a nested guest L2. Due to improper validation of the "virtext" field, this issue could allow a malicious...
CVE-2021-3656
A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB virtual machine control block provided by the L1 guest to spawn/handle a nested guest L2. Due to improper validation of the "virtext" field, this issue could allow a malicious...
CVE-2021-3656: Missing Authorization
A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB virtual machine control block provided by the L1 guest to spawn/handle a nested guest L2. Due to improper validation of the "virtext" field, this issue could allow a malicious...
DRAKVUF Sandbox - Automated Hypervisor-Level Malware Analysis System
DRAKVUF Sandbox is an automated black-box malware analysis system with DRAKVUF engine under the hood, which does not require an agent on guest OS. This project provides you with a friendly web interface that allows you to upload suspicious files to be analyzed. Once the sandboxing job is finished...
GSD-2022-1000537 KVM: x86: nSVM: fix potential NULL derefernce on nested migration
KVM: x86: nSVM: fix potential NULL derefernce on nested migration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.11 by commit...
GSD-2022-1000455 KVM: x86: nSVM: fix potential NULL derefernce on nested migration
KVM: x86: nSVM: fix potential NULL derefernce on nested migration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.25 by commit...
PT-2022-28811
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.16.10 Description A potential NULL dereference issue was discovered in the KVM x86 nSVM component on nested migration. The actual impact and attack plausibility have not yet been proven. Recommendations F...
PT-2022-28729
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.25 Description A potential NULL dereference issue was identified in the KVM x86 nSVM component on nested migration. The actual impact and attack plausibility have not yet been proven. Recommendations For...
PT-2022-28886
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.16.5 Description The issue is related to KVM x86 and nested virtualization, specifically when the SMM state is toggled. The actual impact and attack plausibility have not yet been proven. Recommendations For...
CVE-2022-25857 jruby/psych/snakeyaml: Denial of Service (DoS) due missing to nested depth limitation for collections
The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service DoS due missing to nested depth limitation for collections. This package is bundled into Psych which is in turn bundled into jruby...
ROS-20220207-01
Vulnerability in the implementation of the tipccryptokeyrcv function of the protocol for intra-cluster communication Transparent Inter-Process Communication TIPC of Linux kernel is related to insufficient input data verification when processing MSGCRYPTO messages. input data validation when...
GSD-2022-1000188 KVM: x86: Forcibly leave nested virt when SMM state is toggled
KVM: x86: Forcibly leave nested virt when SMM state is toggled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.97 by commit...
PT-2022-28526
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.19 Description The issue is related to KVM x86 and forcibly leaving nested virtualization when the SMM state is toggled. The actual impact and attack plausibility have not yet been proven. Recommendations F...
PT-2022-28466
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.10.97 Description The issue is related to KVM x86, where the system forcibly leaves nested virtualization when the SMM state is toggled. The actual impact and attack plausibility have not yet been proven...
