open-vm-tools bug fix and enhancement update

An update is available for open-vm-tools. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linu...

CVE-2024-0094

NVIDIA vGPU software for Linux contains a vulnerability in the Virtual GPU Manager, where an untrusted guest VM can cause improper control of the interaction frequency in the host. A successful exploit of this vulnerability might lead to denial of service...

CVE-2024-0094

CVE-2024-0094 concerns NVIDIA vGPU software for Linux, specifically a vulnerability in the Virtual GPU Manager that allows an untrusted guest VM to cause improper control of the interaction frequency on the host, potentially leading to denial of service. The CVE is documented with a CVSS 3.1 base...

CVE-2024-5661 Potential Denial of Service affecting XenServer and Citrix Hypervisor

An issue has been identified in both XenServer 8 and Citrix Hypervisor 8.2 CU1 LTSR which may allow a malicious administrator of a guest VM to cause the host to become slow and/or unresponsive...

CVE-2024-5661

CVE-2024-5661 affects XenServer 8 and Citrix Hypervisor 8.2 CU1 LTSR. The root cause is an improper rate limiting issue in an endpoint, which a malicious administrator of a guest VM can exploit to cause the host to become slow and/or unresponsive (Denial of Service). Impact is a local, privilege-...

CVE-2024-5661 Potential Denial of Service affecting XenServer and Citrix Hypervisor

An issue has been identified in both XenServer 8 and Citrix Hypervisor 8.2 CU1 LTSR which may allow a malicious administrator of a guest VM to cause the host to become slow and/or unresponsive...

PT-2024-7650

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description A use-after-free vulnerability was found in the QEMU LSI53C895A SCSI Host Bus Adapter emulation. This issue can lead to a crash or VM escape, potentially allowing an attacker to escalate...

CVE-2024-37325

Azure Science Virtual Machine DSVM Elevation of Privilege Vulnerability...

CVE-2024-37325 Azure Science Virtual Machine (DSVM) Elevation of Privilege Vulnerability

...

CVE-2024-37325

CVE-2024-37325 affects Microsoft Azure Data Science Virtual Machines (DSVM) running Linux/Ubuntu and is an Elevation of Privilege vulnerability. The DSVMs with versions older than 24.05.24 are vulnerable; an unauthenticated attacker can obtain user credentials and log in with elevated privileges,...

XenServer and Citrix Hypervisor Security Update for CVE-2024-5661

An issue has been identified in both XenServer 8 and Citrix Hypervisor 8.2 CU1 LTSR which mayallow a malicious administrator of a guest VM to cause the host to become slow and/or unresponsive. This issue has the following identifier: CVE-2024-5661 CVE-2024-5661 affects all deployments. Summary CV...

SUSE CVE-2020-10773

A stack information leak flaw was found in s390/s390x in the Linux kernel's memory manager functionality, where it incorrectly writes to the /proc/sys/vm/cmmtimeout file. This flaw allows a local user to see the kernel data...

CVE-2024-36911

In the Linux kernel, the following vulnerability has been resolved: hvnetvsc: Don't free decrypted memory In CoCo VMs it is possible for the untrusted host to cause setmemoryencrypted or setmemorydecrypted to fail such that an error is returned and the resulting memory is shared. Callers need to...

CVE-2024-36944

In the Linux kernel, the following vulnerability has been resolved: Reapply "drm/qxl: simplify qxlfencewait" This reverts commit 07ed11afb68d94eadd4ffc082b97c2331307c5ea. Stephen Rostedt reports: "I went to run my tests on my VMs and the tests hung on boot up. Unfortunately, the most I ever got o...

RHEL 8 : fence-agents (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - python-httplib2: Regular expression denial of service via malicious header CVE-2021-21240 - A flaw was...

RHEL 8 : open-vm-tools (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - open-vm-tools: access bypass due to realpath race condition in mount.vmhgfs aka hgfsmounter CVE-2009-1143 Note that...

DEBIAN-CVE-2024-36944

In the Linux kernel, the following vulnerability has been resolved: Reapply "drm/qxl: simplify qxlfencewait" This reverts commit 07ed11afb68d94eadd4ffc082b97c2331307c5ea. Stephen Rostedt reports: "I went to run my tests on my VMs and the tests hung on boot up. Unfortunately, the most I ever got o...

DEBIAN-CVE-2024-36906

In the Linux kernel, the following vulnerability has been resolved: ARM: 9381/1: kasan: clear stale stack poison We found below OOB crash: 33.452494 ================================================================== 33.453513 BUG: KASAN: stack-out-of-bounds in...

CVE-2024-36944

In the Linux kernel, the following vulnerability has been resolved: Reapply "drm/qxl: simplify qxlfencewait" This reverts commit 07ed11afb68d94eadd4ffc082b97c2331307c5ea. Stephen Rostedt reports: "I went to run my tests on my VMs and the tests hung on boot up. Unfortunately, the most I ever got o...

UBUNTU-CVE-2024-36906

In the Linux kernel, the following vulnerability has been resolved: ARM: 9381/1: kasan: clear stale stack poison We found below OOB crash: 33.452494 ================================================================== 33.453513 BUG: KASAN: stack-out-of-bounds in...