PT-2017-4275

Name of the Vulnerable Software and Affected Versions: GNU Binutils versions 2.29 and earlier Description: The issue is related to the bfd vms slurp eeom function in libbfd.c of the Binary File Descriptor BFD library, which allows remote attackers to cause an out of bounds heap read via a crafted...

PT-2017-4276

Name of the Vulnerable Software and Affected Versions: GNU Binutils versions 2.29 and earlier Description: The issue is related to the bfd vms slurp egsd function in the bfd/vms-alpha.c component of the GNU Binutils library. It allows remote attackers to cause an arbitrary memory read via a craft...

italy-vms.ru XSS vulnerability

Vulnerable URL: https://italy-vms.ru/vcs/cancel.htm?lang=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 109113 VIP website status:| No Check italy-vms.ru SSL connection:| Grade: ...

GNU Binutils 'bfd/vms-alpha.c' Heap Buffer Overflow Vulnerability

GNU Binutils a.k.a. GNU Binary Utilities or binutils is a set of programming language utilities developed by the GNU Project to work with object files in a variety of formats, with connectors, assemblers, and other tools for object files and archives.The Binary File Descriptor BFD library a.k.a...

GNU Binutils 'bfd/vms-alpha.c' Remote Buffer Overflow Vulnerability

GNU Binutils is a set of programming language utility programs developed by the GNU Project. A security vulnerability exists in the bfd/vms-alpha.c file of the BFD library in GNU Binutils version 2.28. A remote attacker can exploit this vulnerability to cause a denial of service buffer overflow a...

DEBIAN-CVE-2017-9745

The bfdvmsslurpetir function in bfd/vms-alpha.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted binary file...

DEBIAN-CVE-2017-9752

bfd/vms-alpha.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling...

UBUNTU-CVE-2017-9745

The bfdvmsslurpetir function in bfd/vms-alpha.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted binary file...

CVE-2017-9752

bfd/vms-alpha.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling...

CVE-2017-9752: Improper Restriction of Operations within the Bounds of a Memory Buffer

bfd/vms-alpha.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling...

CVE-2017-9745: Improper Restriction of Operations within the Bounds of a Memory Buffer

The bfdvmsslurpetir function in bfd/vms-alpha.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted binary file...

PT-2017-19152

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The issue allows remote attackers to cause a denial of service, resulting in a buffer overflow and application crash, or possibly have other unspecified impacts. This occurs via a crafted binary file, whic...

PT-2017-19159

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The issue allows remote attackers to cause a denial of service, resulting in a buffer overflow and application crash, or possibly have other unspecified impacts. This occurs via a crafted binary file, whic...

Null pointer dereference

VMware Workstation Pro/Player 12.x before 12.5.3 contains a NULL pointer dereference vulnerability that exists in the SVGA driver. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs...

Update Rollup 13 for System Center 2012 R2 Data Protection Manager

Update Rollup 13 for System Center 2012 R2 Data Protection Manager Introduction This article describes the issues that are fixed in Update Rollup 13 for Microsoft System Center 2012 R2 Data Protection Manager. It also contains the installation instructions for this update. Note Existing Data...

Product update: Virtuozzo Automator 7.0 Update 2 (VA MN: 7.0.2-266, VA Agent: 7.0.2-115)

The Update 2 for Virtuozzo Automator 7.0 provides new features and stability and usability bug fixes. Vulnerability id: PVA-36694 No 'Renew backup' button on virtual environment's backups tab. Vulnerability id: PVA-36693 Existing bridges were not used when attaching interfaces to virtual networks...

How to forcibly shutdown VMs from command line

To shutdown VMs that are not responding to a shutdown command from XenCenter or the xe CLI...

Oracle VM VirtualBox - virtio-net Guest-to-Host Out-of-Bounds Write

Oracle VM VirtualBox - virtio-net Guest-to-Host Out-of-Bounds Write Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1136 This is a vulnerability that affects VirtualBox VMs that use a virtio network adapter which is a non-standard configuration. It permits the guest kernel to...

VirtualBox: cooperating VMs can escape from shared folder (CVE-2017-3538)

There is a security issue in the shared folder implementation that permits cooperating guests with write access to the same shared folder to gain access to the whole filesystem of the host, at least on Linux hosts. The issue is that, when the host checks whether a given path escapes the root...

PT-2017-16231

Name of the Vulnerable Software and Affected Versions Cloud Foundry Foundation BOSH Azure CPI version v22 Description The issue allows a maliciously crafted stemcell to potentially execute arbitrary code on VMs created by the director. This is described as a CPI code injection issue...