1188 matches found
Ubuntu 14.04 LTS / 16.04 LTS : QEMU vulnerabilities (USN-3575-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3575-1 advisory. It was discovered that QEMU incorrectly handled guest ram. A privileged attacker inside the guest could use this issue to cause QEMU to crash...
USN-3575-1 qemu vulnerabilities
It was discovered that QEMU incorrectly handled guest ram. A privileged attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. CVE-2017-11334 David Buchanan discovered that QEMU...
Mozilla: Integer overflow in Skia library during edge builder allocation (MFSA 2018-03)
An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 8 GB of RAM. This results in the use of uninitialized memory, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird 52.6, Firefox ESR 52.6, a...
IMPORTANT: Web blocking / RAM usage announcement
On January 27, we published a protection update that caused connection issues for many of our customers. As a side effect of the web protection blocks, the product also spiked memory usage and possibly caused a crash. We have triaged this issue and pushed a protection update that resolves it. For...
Mozilla: Integer overflow in Skia library during edge builder allocation (MFSA 2018-03)
An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 8 GB of RAM. This results in the use of uninitialized memory, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird 52.6, Firefox ESR 52.6, a...
Design/Logic Flaw
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while updating a firmware image, data is read from flash into RAM without checking that the data fits into allotted RAM size...
CVE-2017-11003
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while updating a firmware image, data is read from flash into RAM without checking that the data fits into allotted RAM size...
CVE-2017-11003
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while updating a firmware image, data is read from flash into RAM without checking that the data fits into allotted RAM size...
FAQ: What are the recommended virtual machine RAM and CPU specs for Unidesk for the Management Appliance and CachePoints?
Q: What are the recommended virtual machine RAM and CPU specs for Unidesk for the Management Appliance and CachePoints? A : Customers will occasionally change the CPU and RAM settings for their Unidesk appliances. We recommend leaving these at the values defined in the original OVF files: 2 CPUs...
Qemu: exec: oob access during dma operation
Quick Emulator QEMU, compiled with qemumapramptr to access guests' RAM block area, is vulnerable to an OOB r/w access issue. The crash can occur if a privileged user inside a guest conducts certain DMA operations, resulting in a DoS...
Qemu: exec: oob access during dma operation
Quick Emulator QEMU, compiled with qemumapramptr to access guests' RAM block area, is vulnerable to an OOB r/w access issue. The crash can occur if a privileged user inside a guest conducts certain DMA operations, resulting in a DoS...
Qemu: exec: oob access during dma operation
Quick Emulator QEMU, compiled with qemumapramptr to access guests' RAM block area, is vulnerable to an OOB r/w access issue. The crash can occur if a privileged user inside a guest conducts certain DMA operations, resulting in a DoS...
Qemu: exec: oob access during dma operation
Quick Emulator QEMU, compiled with qemumapramptr to access guests' RAM block area, is vulnerable to an OOB r/w access issue. The crash can occur if a privileged user inside a guest conducts certain DMA operations, resulting in a DoS...
Qemu: exec: oob access during dma operation
Quick Emulator QEMU, compiled with qemumapramptr to access guests' RAM block area, is vulnerable to an OOB r/w access issue. The crash can occur if a privileged user inside a guest conducts certain DMA operations, resulting in a DoS...
Qemu: exec: oob access during dma operation
Quick Emulator QEMU, compiled with qemumapramptr to access guests' RAM block area, is vulnerable to an OOB r/w access issue. The crash can occur if a privileged user inside a guest conducts certain DMA operations, resulting in a DoS...
Internet Bug Bounty: GarlicRust - heartbleed style vulnerability in major I2P C++ router implementations
Brief ----- I2pd and kovri are both C++ I2P routers that share the same code base, as kovri was forked from i2pd several years ago. The vulnerability lies in a common code piece, making both implementations vulnerable, as was acknowledged by orignal, the main developer of i2pd. The vulnerability ...
Cache file size of "Cache on device RAM with overflow on hard disk" is growing faster than "Cache on device hard disk"
Cache file size of "Cache on device RAM with overflow on hard disk" is growing faster than "Cache on device hard disk"...
Why cache file size of "Cache on device RAM with overflow on hard disk" is growing faster than "Cache on device hard disk"
Cache Type = "Cache on device hard disk" The block reservation of "Cache on device hard disk" is ONLY 4KB, and it's random I/O. Cache Type = "Cache on device RAM with overflow on hard disk" Since "overflow on hard disk" is vhdx format, the block reservation is 2MB & required for sequential I/O,...
How to Update MCS created Machine Catalog to modify vCPU, RAM.
Due to performance issues the vCPU,RAM need to be increased. This can be done by power shell...
Denial Of Service (DoS)
github.com/moby/moby formerly known as github.com/docker/docker is vulnerable to denial of service DoS attacks. These attacks are possible because the NewInputTarStream function in tar-split does not limit the number of \0's at the end of an archive, filling the RAM...