Information disclosure

An incorrect permissions vulnerability in Juniper Networks Junos OS on vMX may allow local unprivileged users on a host system read access to vMX or vPFE images and obtain sensitive information contained in them such as private cryptographic keys. This issue was found during internal product...

CVE-2016-4924

An incorrect permissions vulnerability in Juniper Networks Junos OS on vMX may allow local unprivileged users on a host system read access to vMX or vPFE images and obtain sensitive information contained in them such as private cryptographic keys. This issue was found during internal product...

CVE-2016-4924 vMX: Information leak vulnerability

An incorrect permissions vulnerability in Juniper Networks Junos OS on vMX may allow local unprivileged users on a host system read access to vMX or vPFE images and obtain sensitive information contained in them such as private cryptographic keys. This issue was found during internal product...

CVE-2016-4924

CVE-2016-4924 affects Juniper Networks Junos OS on vMX. The issue is an incorrect permissions vulnerability that allows local unprivileged users to read the vMX/vPFE images on the host and expose sensitive information, such as private cryptographic keys. Affected releases are Junos OS 15.1 prior ...

CVE-2016-4924: Undefined Security Weakness

An incorrect permissions vulnerability in Juniper Networks Junos OS on vMX may allow local unprivileged users on a host system read access to vMX or vPFE images and obtain sensitive information contained in them such as private cryptographic keys. This issue was found during internal product...

PT-2017-8608

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions 15.1 prior to 15.1F5 Juniper Networks Junos OS versions 14.1 prior to 14.1R8 Description An issue in Juniper Networks Junos OS on vMX allows local unprivileged users on a host system to have read access to vM...

DEBIAN-CVE-2017-12154

The preparevmcs02 function in arch/x86/kvm/vmx.c in the Linux kernel through 4.13.3 does not ensure that the "CR8-load exiting" and "CR8-store exiting" L0 vmcs02 controls exist in cases where L1 omits the "use TPR shadow" vmcs12 control, which allows KVM L2 guest OS users to obtain read and write...

CVE-2017-4898

VMware Workstation Pro/Player 12.x before 12.5.3 contains a DLL loading vulnerability that occurs due to the "vmware-vmx" process loading DLLs from a path defined in the local environment-variable. Successful exploitation of this issue may allow normal users to escalate privileges to System in th...

PT-2017-16189

Name of the Vulnerable Software and Affected Versions VMware Workstation Pro/Player versions prior to 12.5.3 Description The issue is related to a DLL loading vulnerability in the "vmware-vmx" process, which loads DLLs from a path defined in the local environment-variable. This could allow normal...

CVE-2017-4898: Undefined Security Weakness

VMware Workstation Pro/Player 12.x before 12.5.3 contains a DLL loading vulnerability that occurs due to the "vmware-vmx" process loading DLLs from a path defined in the local environment-variable. Successful exploitation of this issue may allow normal users to escalate privileges to System in th...

Linux kernel denial of service vulnerability (CNVD-2017-06741)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A denial of service vulnerability in the handleinvept function in arch/x86/kvm/vmx.c in Linux kernel 3.12 through 3.15 allows users of a privileged KVM client operating system...

DEBIAN-CVE-2017-2596

The nestedvmxcheckvmptr function in arch/x86/kvm/vmx.c in the Linux kernel through 4.9.8 improperly emulates the VMXON instruction, which allows KVM L1 guest OS users to cause a denial of service host OS memory consumption by leveraging the mishandling of page references...

PT-2017-1185 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.9.8 Description: The issue is related to errors in resource management in the nested vmx check vmptr function of the Linux operating system. This can be exploited by a local attacker to cause a denial of...

Linux Kernel 'arch/x86/kvm/vmx.c' Denial of Service Vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. Linux kernel is prone to denial of service vulnerabilities. An attacker can exploit the vulnerability to cause a denial of service...

xen-kernel -- x86 task switch to VM86 mode mis-handled

The Xen Project reports: LDTR, just like TR, is purely a protected mode facility. Hence even when switching to a VM86 mode task, LDTR loading needs to follow protected mode semantics. This was violated by the code. On SVM AMD hardware: a malicious unprivileged guest process can escalate its...

Juniper Junos vMX 14.1 < 14.1R8 / 15.1 < 15.1F5 Local Information Disclosure (JSA10766)

According to its self-reported version number and architecture, the remote Juniper Junos vMX Virtual MX Series router is 14.1 prior to 14.1R8 or 15.1 prior to 15.1F5. It is, therefore, affected by a local information disclosure vulnerability due to the use of incorrect permissions. A local attack...

Juniper vMX Local Security Bypass Vulnerability

Juniper Junos is a Juniper Networks network operating system designed for the company's hardware systems. The operating system provides a secure programming interface and the Junos SDK. A local security bypass vulnerability exists in Juniper vMX, which could allow an attacker to bypass security...

Juniper Networks Junos OS vMX Information Leak Vulnerability

Junos OS on vMX is prone to an information leak vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if...

The vulnerability of VMWare Player’s software allows a malicious individual to compromise the accessibility of protected information.

The vulnerability in VMware Workstation, VMware Player, VMware Fusion, VMware ESXi, and VMware ESX allows users of these guest operating systems to trigger a service failure VMX process crash by using an invalid port...

Code injection

arch/x86/kvm/vmx.c in the Linux kernel through 4.6.3 mishandles the APICv on/off state, which allows guest OS users to obtain direct APIC MSR access on the host OS, and consequently cause a denial of service host OS crash or possibly execute arbitrary code on the host OS, via x2APIC mode...