Lucene search
K

49 matches found

OSV
OSV
added 2012/10/31 4:55 p.m.1 views

DEBIAN-CVE-2012-4544

The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk 1 before or 2 after decompression, which allows local guest administrators to cause a denial of service domain 0 memory consumption via a crafted a kernel or b ramdisk...

2.1CVSS8AI score0.0009EPSS
Exploits0References1
NVD
NVD
added 2012/10/31 4:55 p.m.14 views

CVE-2012-4544

The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk 1 before or 2 after decompression, which allows local guest administrators to cause a denial of service domain 0 memory consumption via a crafted a kernel or b ramdisk...

2.1CVSS5.9AI score0.0009EPSS
Exploits0References21
UbuntuCve
UbuntuCve
added 2012/10/31 4:55 p.m.25 views

CVE-2012-4544

The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk 1 before or 2 after decompression, which allows local guest administrators to cause a denial of service domain 0 memory consumption via a crafted a kernel or b ramdisk...

2.1CVSS7.2AI score0.0009EPSS
Exploits0References7
Prion
Prion
added 2012/10/31 4:55 p.m.24 views

Design/Logic Flaw

The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk 1 before or 2 after decompression, which allows local guest administrators to cause a denial of service domain 0 memory consumption via a crafted a kernel or b ramdisk...

2.1CVSS6.5AI score0.0009EPSS
Exploits0References21Affected Software1
Cvelist
Cvelist
added 2012/10/31 4:0 p.m.21 views

CVE-2012-4544

The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk 1 before or 2 after decompression, which allows local guest administrators to cause a denial of service domain 0 memory consumption via a crafted a kernel or b ramdisk...

3.5AI score0.0009EPSS
Exploits0References21
RedHat Linux
RedHat Linux
added 2012/02/21 2:20 a.m.4 views

kexec-tools: Multiple security flaws by management of kdump core files and ramdisk images

The Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1.102pre-154 and 2.x before 2.0.0-209 packages in Red Hat Enterprise Linux, uses world-readable permissions for vmcore files, which allows local users to obtain sensitive information by inspecting the file...

5.7CVSS5.8AI score0.00127EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2012/02/21 12:0 a.m.28 views

RHEL 5 : kexec-tools (RHSA-2012:0152)

The remote Redhat Enterprise Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2012:0152 advisory. The kexec-tools package contains the /sbin/kexec binary and utilities that together form the user-space component of the kernel's kexec...

5.7CVSS5.8AI score0.00168EPSS
Exploits3References12
Tenable Nessus
Tenable Nessus
added 2011/12/06 12:0 a.m.24 views

RHEL 6 : kexec-tools (RHSA-2011:1532)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2011:1532 advisory. Kexec allows for booting a Linux kernel from the context of an already running kernel. Kdump used the SSH Secure Shell...

5.7CVSS5.9AI score0.00168EPSS
Exploits3References16
RedHat Linux
RedHat Linux
added 2011/12/05 7:54 p.m.0 views

kexec-tools: Multiple security flaws by management of kdump core files and ramdisk images

The Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1.102pre-154 and 2.x before 2.0.0-209 packages in Red Hat Enterprise Linux, includes all of root's SSH private keys within a vmcore file, which allows context-dependent attackers to obtain sensitive...

5.7CVSS5.8AI score0.00168EPSS
Exploits1References4
Rows per page
Query Builder