4243 matches found
Kernel: KVM: export MSR_IA32_TSX_CTRL to guest - incomplete fix for TAA (CVE-2019-11135)
A flaw was found in the fix for CVE-2019-11135, the way Intel CPUs handle speculative execution of instructions when a TSX Asynchronous Abort TAA error occurs. When a guest is running on a host CPU affected by the TAA flaw TAANO=0, but is not affected by the MDS issue MDSNO=1, the guest was to...
The vulnerability of Xen hypervisors arises from the simultaneous execution using a shared resource with incorrect synchronization. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of Xen hypervisors is related to an error in the restart operations for volume change operations. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability of Xen hypervisors arises from synchronization errors when using shared resources, allowing a malicious actor to cause service failures or increase their privileges.
The vulnerability of Xen hypervisors arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service failures or increase their privileges by adding a device with persistent communication capabilities...
Issues that are fixed in System Center 2012 R2 Operations Manager Update Rollup 1
Issues that are fixed in System Center 2012 R2 Operations Manager Update Rollup 1 Introduction This article describes the issues that are fixed in Update Rollup 1 for Microsoft System Center 2012 R2 Operations Manager. Additionally, this article contains the installation instructions for Update...
Update Rollup 3 for System Center 2012 R2 Operations Manager
Update Rollup 3 for System Center 2012 R2 Operations Manager Introduction This article describes the issues that are fixed in Update Rollup 3 for Microsoft System Center 2012 R2 Operations Manager. Additionally, this article contains the installation instructions for Update Rollup 3 for System...
Update Rollup 4 for System Center 2012 R2 Operations Manager
Update Rollup 4 for System Center 2012 R2 Operations Manager This article describes the issues that are fixed in Update Rollup 4 for Microsoft System Center 2012 R2 Operations Manager. Additionally, this article contains the installation instructions for Update Rollup 4 for System Center 2012 R2...
The vulnerability of the apport operating system’s error registration service, related to synchronization errors when using a shared resource, allows a malicious actor to create a publicly accessible report of the software bug for privileged processes.
The vulnerability of the apport operating system’s error registration service is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to create a publicly accessible report of the software bug for privileged processes...
The vulnerability of Broadcom’s Wi-Fi chip drivers allows intruders to gain unauthorized access to protected information.
The vulnerability of Broadcom’s Wi-Fi chip drivers is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...
Unspecified Vulnerability in LINBIT csync2
LINBIT csync2 is a cluster synchronization tool from the Austrian company LINBIT, which is mainly used to keep files on multiple hosts in a cluster synchronized. A security vulnerability exists in the ''csyncdaemonsession''function in the daemon.c file in LINBIT csync2 2.0 and earlier versions,...
FreeBSD-SA-20:09.ntp
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-20:09.ntp Security Advisory The FreeBSD Project Topic: Multiple denial of service in ntpd Category: contrib Module: ntp Announced: 2020-03-19 Credits: Philippe...
March 17, 2020—KB4541333 (OS Build 17134.1399)
None None...
hw: TSX Transaction Asynchronous Abort (TAA)
A flaw was found in the way Intel CPUs handle speculative execution of instructions when the TSX Asynchronous Abort TAA error occurs. A local authenticated attacker with the ability to monitor execution times could infer the TSX memory state by comparing abort execution times. This could allow...
The vulnerability of the KVM virtualization subsystem in Linux operating systems allows a perpetrator to gain access to confidential data.
The vulnerability of the KVM virtualization subsystem in Linux operating systems is related to the simultaneous execution using shared resources with improper synchronization. Exploiting this vulnerability allows an attacker to gain access to confidential data...
The vulnerability of the QEMU implementation of the Media Transfer Protocol allows a perpetrator to gain unauthorized access to information.
The vulnerability of the QEMU implementation of the Media Transfer Protocol is caused by synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to information...
The vulnerability of Google Chrome’s browser extensions allows a hacker to trigger a service failure.
The vulnerability of Google Chrome’s browser extensions’ web interface is related to the use of a shared resource with incorrect synchronization. Exploiting this vulnerability allows an attacker to cause a service failure through a specially created HTML page...
Fedora: Security Advisory for systemd (FEDORA-2020-f8e267d6d0)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
hw: TSX Transaction Asynchronous Abort (TAA)
A flaw was found in the way Intel CPUs handle speculative execution of instructions when the TSX Asynchronous Abort TAA error occurs. A local authenticated attacker with the ability to monitor execution times could infer the TSX memory state by comparing abort execution times. This could allow...
The vulnerability of the DxgkDdiEscape function in the NVIDIA GeForce, Quadro, and Tesla graphics processor software, related to errors in synchronizing common data, allows attackers to cause system failures, increase their privileges, or disclose sensitive information.
The vulnerability of the DxgkDdiEscape function in the NVIDIA GeForce, Quadro, and Tesla graphics processing unit software is related to errors during the synchronization of common data. Exploiting this vulnerability can allow an attacker to cause system failures, increase their privileges, or...
Nextcloud Input Validation Error Vulnerability
Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. Nextcloud is vulnerable to an input validation error. The vulnerability originates from a network system or product that does not properly validate incoming...
