Design/Logic Flaw

Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect availability via vectors related to Kernel Zones virtualized NIC driver...

CVE-2015-2651

CVE-2015-2651 affects Oracle Solaris 11.2 kernel zones’ virtualized NIC driver. Local attackers can cause a denial of service by exploiting a vulnerability in the NIC driver component. No explicit exploit details are given in the provided sources. The vulnerability is discussed across multiple re...

Oracle Solaris Critical Patch Update : jul2015_SRU11_2_11_5_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: S10 Branded Zone. Supported versions that are affected are 10 and 11.2. Easily exploitable vulnerability requiring...

Security update for xen (important)

Xen was updated to 4.4.2 to fix multiple vulnerabilities and non-security bugs. The following vulnerabilities were fixed: CVE-2015-4103: Potential unintended writes to host MSI message data field via qemu XSA-128 boo931625 CVE-2015-4104: PCI MSI mask bits inadvertently exposed to guests XSA-129...

virtio-win: netkvm: malformed packet can cause BSOD

It was found that the Windows Virtio NIC driver did not sufficiently sanitize the length of the incoming IP packets, as demonstrated by a packet with IP options present but the overall packet length not being adjusted to reflect the length of those options. A remote attacker able to send a...

Important: Red Hat Security Advisory: virtio-win security and bug fix update

An updated virtio-win package that fixes one security issue and two bugs is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

virtio-win: netkvm: malformed packet can cause BSOD

It was found that the Windows Virtio NIC driver did not sufficiently sanitize the length of the incoming IP packets, as demonstrated by a packet with IP options present but the overall packet length not being adjusted to reflect the length of those options. A remote attacker able to send a...

Security update for xen (important)

Xen was updated to 4.3.4 to fix multiple vulnerabities and non-security bugs. The following vulnerabilities were fixed: - Long latency MMIO mapping operations are not preemptible XSA-125 CVE-2015-2752 bnc922705 - Unmediated PCI command register access in qemu XSA-126 CVE-2015-2756 bnc922706 -...

kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2015:0674 Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System...

OracleVM 2.1 : kernel (OVMSA-2009-0017)

The remote OracleVM system is missing necessary patches to address critical security updates : CVE-2009-1895 The personality subsystem in the Linux kernel before 2.6.31-rc3 has a PERCLEARONSETID setting that does not clear the ADDRCOMPATLAYOUT and MMAPPAGEZERO flags when executing a setuid or...

Microsoft issues Emergency Windows Update to Block Fake SSL Certificates

Today, Microsoft has issued an emergency update for almost all versions of Windows and also for Microsoft devices running Windows Phone 8 and 8.1 to secure users from attacks that abuse the latest issued rogue SSL certificates, which could be used to impersonate Google and Yahoo! websites. A week...

Google Constrains India CCA Root Cert in Wake of Bad Google and Yahoo Certificates

The Indian Controller of Certifying Authorities said that the certificate-issuance process for the National Informatics Centre of India, which issued several fraudulent certificates recently, which were blocked by Google, has been compromised and Google has decided to constrain India CCA’s root...

Google catches Indian Government Agency with Fake Digital Certificates

Google has identified and blocked unauthorized digital certificates for a number of its domains issued by the National Informatics Centre NIC of India, a unit of India’s Ministry of Communications and Information Technology. National Informatics Center NIC holds several intermediate Certification...

Scientific Linux Security Update : libvirt on SL6.x i386/x86_64 (20140527)

It was found that libvirt passes the XMLPARSENOENT flag when parsing XML documents using the libxml2 library, in which case all XML entities in the parsed documents are expanded. A user able to force libvirtd to parse an XML document with an entity pointing to a special file that blocks on read...

Global Domains International Cross Site Scripting / Traversal

Global Domains International Directory traversal Vulnerability 0-Day ==================================================================== Author : indoushka vendor : http://www.nic.ws ======================================================== Dork : Copyright © 2014 by Global Domains International,...

SuSE 11.3 Security Update : libvirt (SAT Patch Number 8886)

This update fixes the following one non-security and two security issues with libvirt : - Fixing device assignment problem with Broadcom 57810 NIC to Guest OS. bnc817407 - qemu job usage issue in several API leading to libvirtd crash. CVE-2013-6458. bnc857492 - denial of service with keepalive...

RedHat Update for kernel RHSA-2013:1860-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for kernel CESA-2013:1790 centos5

Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2013:1790 centos5 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Oracle Linux 5 : kernel (ELSA-2013-1790)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1790 advisory. - xen information leak via I/O instruction emulation Igor Mammedov 1009602 1009603 CVE-2013-4355 - xen x86: check segment descriptor read result in 64-bit OUTS...

CentOS 5 : kernel (CESA-2013:1292)

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...