RHSA-2021:0028 Red Hat Security Advisory: Red Hat Virtualization security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2015:0158 Red Hat Security Advisory: Red Hat Enterprise Virtualization Manager 3.5.0

Bulletin has no description...

RHSA-2014:1161 Red Hat Security Advisory: Red Hat Enterprise Virtualization Manager 3.4.2 update

Bulletin has no description...

RHBA-2015:0230 Red Hat Bug Fix Advisory: Red Hat Enterprise Virtualization Manager 3.5.0-1 ASYNC

Bulletin has no description...

RHSA-2014:0506 Red Hat Security Advisory: Red Hat Enterprise Virtualization Manager 3.4.0 update

Bulletin has no description...

RHSA-2014:0416 Red Hat Security Advisory: rhevm-spice-client security update

Bulletin has no description...

RHSA-2014:0038 Red Hat Security Advisory: Red Hat Enterprise Virtualization Manager 3.3.0 update

Bulletin has no description...

RHSA-2012:1506 Red Hat Security Advisory: Red Hat Enterprise Virtualization Manager 3.1

Bulletin has no description...

RHSA-2013:0888 Red Hat Security Advisory: Red Hat Enterprise Virtualization Manager 3.2 update

Bulletin has no description...

AZL-49335 CVE-2024-46707 affecting package kernel for versions less than 5.15.167.1-1

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Make ICCSGIEL1 undef in the absence of a vGICv3 On a system with a GICv3, if a guest hasn't been configured with GICv3 and that the host is not capable of GICv2 emulation, a write to any of the ICCSGIEL1 registers is...

DEBIAN-CVE-2024-46707

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Make ICCSGIEL1 undef in the absence of a vGICv3 On a system with a GICv3, if a guest hasn't been configured with GICv3 and that the host is not capable of GICv2 emulation, a write to any of the ICCSGIEL1 registers is...

UBUNTU-CVE-2024-46707

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Make ICCSGIEL1 undef in the absence of a vGICv3 On a system with a GICv3, if a guest hasn't been configured with GICv3 and that the host is not capable of GICv2 emulation, a write to any of the ICCSGIEL1 registers is...

The vulnerability of the Libvirt virtualization management library, related to the assignment of the null pointer, allows a attacker to trigger a service failure.

The vulnerability of the Libvirt virtualization management library is related to the assignment of a null pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Windows Network Virtualization service allows a hacker to execute arbitrary code.

The vulnerability of the Windows Network Virtualization service for Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of the Windows Network Virtualization service allows a hacker to execute arbitrary code.

The vulnerability of the Windows Network Virtualization service for Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2024-34016

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: A race condition issue has been resolved in the Linux kernel, specifically in the scsi: lpfc component. The problem occurred when deleting an NPIV instance, as it required all fabric...

KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()

...

VulnCheck KEV: CVE-2024-22253

VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the UHCI USB controller. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. On ESXi, the...

Vulnerability of the arch/x86/kvm/x86.c component and lapic_shutdown within the Kernel-Based Virtual Machine (KVM) virtualization subsystem of the Linux operating system, which allows a hacker to trigger a service failure.

The vulnerability in the arch/x86/kvm/x86.c component of the KVM kernel-based virtualization subsystem in Linux operating systems is related to the disabling of the tsc-deadline mode and the execution of a reboot in the guest system. Exploiting this vulnerability can allow an attacker to cause a...

CVE-2024-8509 Migration toolkit for virtualization: forklift-controller: empty bearer token may perform authentication

A vulnerability was found in Forklift Controller. There is no verification against the authorization header except to ensure it uses bearer authentication. Without an Authorization header and some form of a Bearer token, a 401 error occurs. The presence of a token value provides a 200 response...