4668 matches found
RedHat Update for libguestfs RHSA-2017:0564-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
VM Escape Earns Hackers $105K at Pwn2Own
Hackers managed to take down Microsoft Edge and escape a virtual machine to boot on the third day of Pwn2Own early Friday. Members from Qihoo’s 360 Security Team carried out the VM exploit, earning the group $105,000, by far the highest amount awarded to a group at the hacking challenge this week...
CVE-2017-0098
Hyper-V in Microsoft Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows guest OS users, running as virtual machines, to cause a denial of service via a crafted application, aka "Hyper-V Denial of Service Vulnerability." This vulnerability is different from those described in...
Github enterprise remote code execution vulnerability analysis-vulnerability warning-the black bar safety net
Right now, almost everyone in the use of GitHub. If you have a lot of Green Paper or for your own code very paranoid, then you can run your own GitHub. Paid$ 2500 dollars, you can get a GitHub Enterprise version for 10 users for one year. In fact, Github enterprise is a virtual machine, but...
Multiple VMware Workstation Product Out-of-Bounds Read Denial of Service Vulnerabilities
VMware Workstation is a virtual machine software product from VMware. An out-of-bounds read denial of service vulnerability exists in multiple VMware Workstation products. An attacker could exploit this vulnerability to crash a virtual machine, resulting in a denial of service...
flash-plugin: multiple code execution issues fixed in APSB17-07
Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to garbage collection in the ActionScript 2 VM. Successful exploitation could lead to arbitrary code execution...
Hyper-V Denial of Service Vulnerability
A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running ...
Hyper-V Denial of Service Vulnerability
A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running ...
Hyper-V Denial of Service Vulnerability
A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running ...
Hyper-V vSMB Remote Code Execution Vulnerability
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate vSMB packet data. An attacker who successfully exploited these vulnerabilities could execute arbitrary code on a target operating system. To exploit these vulnerabilities, an attacker...
Hyper-V Denial of Service Vulnerability
A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running ...
Hyper-V vSMB Remote Code Execution Vulnerability
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate vSMB packet data. An attacker who successfully exploited these vulnerabilities could execute arbitrary code on a target operating system. To exploit these vulnerabilities, an attacker...
March 14, 2017—KB4013429 (OS Build 14393.953)
None None...
VMPanel cybervm log on at the parameters the username reflected XSS vulnerability
0x01 vulnerability profile VMPanel is a powerful Web-based service VMware Esx/Esxi control panel, the user can remotely create or delete the virtual machine. Official website: http://cybervm.com/ VMPanel in the login page the user name input box because the filter is not strict, resulting in XSS...
Virglrenderer Integer Overflow Vulnerability
Virgil is a research project aimed at investigating the possibilities of creating virtual 3D GPUs in qemu virtual machines, which allow client operating systems to use the capabilities of the host GPU to accelerate 3D rendering. An integer overflow vulnerability exists in Virglrenderer. An attack...
Virglrenderer Stack Buffer Overflow Vulnerability
Virgil is a research project aimed at investigating the possibilities of creating virtual 3D GPUs in qemu virtual machines, which allow client operating systems to use the capabilities of the host GPU to accelerate 3D rendering. Virglrenderer suffers from a heap buffer overflow vulnerability. An...
DEBIAN-CVE-2015-2877
Kernel Samepage Merging KSM in the Linux kernel 2.6.32 through 4.x does not prevent use of a write-timing side channel, which allows guest OS users to defeat the ASLR protection mechanism on other guest OS instances via a Cross-VM ASL INtrospection CAIN attack. NOTE: the vendor states "Basically ...
Scientific Linux Security Update : qemu-kvm on SL7.x x86_64 (20170302)
Security Fixes : - Quick emulator QEMU built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process...
Scientific Linux Security Update : kernel on SL7.x x86_64 (20170302)
Security Fixes : - Linux kernel built with the Kernel-based Virtual Machine CONFIGKVM support is vulnerable to a NULL pointer dereference flaw. It could occur on x86 platform, when emulating an undefined instruction. An attacker could use this flaw to crash the host kernel resulting in DoS...
kernel: kvm: x86: NULL pointer dereference during instruction decode
Linux kernel built with the Kernel-based Virtual Machine CONFIGKVM support is vulnerable to a null pointer dereference flaw. It could occur on x86 platform, when emulating an undefined instruction. An attacker could use this flaw to crash the host kernel resulting in DoS...