4668 matches found
Update Rollup 13 for System Center 2012 R2 Virtual Machine Manager
Update Rollup 13 for System Center 2012 R2 Virtual Machine Manager Introduction This article describes the issues that are fixed in Update Rollup 13 for Microsoft System Center 2012 R2 Virtual Machine Manager. There are two updates available for Virtual Machine Manager, one for the Virtual Machin...
CVE-2017-10190
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2 and 12.2.0.1. Easily exploitable vulnerability allows high privileged attacker having Create Session, Create Procedure privilege with logon to the infrastructure where Jav...
Unspecified Vulnerability in Oracle Database Server (CNVD-2017-30893)
Oracle Database Server is an object-a relational database management system that provides an open, comprehensive, and integrated approach to information management. An unspecified vulnerability exists in the Java VM component of Oracle Database Server, which could be exploited by an attacker to...
PT-2017-12394 · Linux +5 · Linux Kernel +5
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.13.8 Description: The issue is related to unbalanced refcounting in the Linux kernel when handling SCSI I/O vectors with small consecutive buffers belonging to the same page. This occurs because the bio add pc...
Joyent SmartOS Hyprlofs FS IOCTL Native File System Integer Overflow Privilege Escalation Vulnerability(CVE-2016-8733)
Summary An exploitable integer overflow exists in the Joyent SmartOS OS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFSADDENTRIES when dealing with native file systems. An attacker can craft an input that can cause a kernel...
Storefront 3.7 - Need's To Have Friendly Name Show Up Instead Of Delivery Group.
When he opens the Storefront it will give him the Delivery Group Name but he needs the VM name to show up...
Linux kernel KVM subsystem input validation vulnerability
The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the U.S. KVM Kernel-based Virtual Machine is a virtualization infrastructure used in it. A security vulnerability exists in the KVM subsystem in Linux kernel 4.13.3 and earlier versions. A local...
DEBIAN-CVE-2017-12168
The accesspmuevcntr function in arch/arm64/kvm/sysregs.c in the Linux kernel before 4.8.11 allows privileged KVM guest OS users to cause a denial of service assertion failure and host OS crash by accessing the Performance Monitors Cycle Count Register PMCCNTR...
rVMI: Perform Full System Analysis with Ease
Manual dynamic analysis is an important concept. It enables us to observe the behavior of a sophisticated malware sample or exploit by executing it in a controlled environment. The information gathered through this process is often crucial in gaining a full understanding of a sample. When...
rVMI: Perform Full System Analysis with Ease
Manual dynamic analysis is an important concept. It enables us to observe the behavior of a sophisticated malware sample or exploit by executing it in a controlled environment. The information gathered through this process is often crucial in gaining a full understanding of a sample. When...
Microsoft Windows Kernel - 'win32k!NtGdiDoBanding' Stack Memory Disclosure
/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1304 We have discovered that the win32k!NtGdiDoBanding system call discloses portions of uninitialized kernel stack memory to user-mode clients. More specifically, exactly 8 bytes of uninitialized kernel stack memory are copied t...
Xen 'mm.c' Remote Elevation of Privilege Vulnerability
Xen is an open source virtual machine monitor product developed at the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A security vulnerability exists in X...
Provisioning services 7.x vdisk Imaging Procedure
To perform imaging sometimes after performing reverse imaging to create a new vDisk from a virtual machine on any residing hypervisor...
UBUNTU-CVE-2017-14317
A domain cleanup issue was discovered in the C xenstore daemon aka cxenstored in Xen through 4.9.x. When shutting down a VM with a stubdomain, a race in cxenstored may cause a double-free. The xenstored daemon may crash, resulting in a DoS of any parts of the system relying on it including domain...
DEBIAN-CVE-2017-14317
A domain cleanup issue was discovered in the C xenstore daemon aka cxenstored in Xen through 4.9.x. When shutting down a VM with a stubdomain, a race in cxenstored may cause a double-free. The xenstored daemon may crash, resulting in a DoS of any parts of the system relying on it including domain...
Design/Logic Flaw
Blue Coat Malware Analysis Appliance MAA before 4.2.5 and Malware Analyzer G2 allow remote attackers to bypass a virtual machine protection mechanism and consequently write to arbitrary files, cause a denial of service host reboot or reset to factory defaults, or execute arbitrary code via vector...
CVE-2015-4523
Blue Coat Malware Analysis Appliance MAA before 4.2.5 and Malware Analyzer G2 allow remote attackers to bypass a virtual machine protection mechanism and consequently write to arbitrary files, cause a denial of service host reboot or reset to factory defaults, or execute arbitrary code via vector...
Exploit for Deserialization of Untrusted Data in Redhat Jboss_Enterprise_Application_Platform
Lab for Java Deserialization Vulnerabilities This content is...
SDX -Memory Showing Less Than Expected on GUI
Memory is showing as 32 GB instead of the expected 48 GB on SVM GUI...
Important: Red Hat Security Advisory: rh-maven33-groovy security update
An update for rh-maven33-groovy is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...