VMSA-2014-0001 VMware Workstation, Player, Fusion, ESXi, ESX and vCloud Director address several security issues

VMware Workstation, Player, Fusion, ESXi, ESX and vCloud Director address several security issues. OpenVAS Vulnerability Test $Id: gbVMSA-2014-0001.nasl 6750 2017-07-18 09:56:47Z teissa $ VMSA-2014-0001: VMware Workstation, Player, Fusion, ESXi, ESX and vCloud Director address several security...

VMware Workstation 9.x < 9.0.1 VMX Process DoS (VMSA-2014-0001)

The version of VMware Workstation installed on the remote host is version 9.x prior to 9.0.1. It is, therefore, reportedly affected by a denial of service vulnerability due to an issue with handling invalid ports that could allow a guest user to crash the VMX process. C Tenable Network Security,...

VMSA-2014-0001 VMware ESXi address several security issues (remote check).

VMware ESXi address several security issues. OpenVAS Vulnerability Test $Id: gbVMSA-2014-0001remote.nasl 6769 2017-07-20 09:56:33Z teissa $ VMSA-2014-0001 VMware ESXi address several security issues remote check. Authors: Michael Meyer Copyright: Copyright c 2014 Greenbone Networks GmbH This...

VMware Fusion 5.x < 5.0.1 VMX Process DoS (VMSA-2014-0001)

The version of VMware Fusion 5.x installed on the remote Mac OS X host is prior to 5.0.1. It is, therefore, reportedly affected by a denial of service vulnerability due to an issue with handling invalid ports that could allow a guest user to crash the VMX process. C Tenable Network Security, Inc...

VMware ESXi/ESX address several security issues (VMSA-2014-0001)

VMware ESXi and ESX address several security issues. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-1936

Xen, when using x86 Intel processors and the VMX virtualization extension is enabled, does not properly handle cpuid instruction emulation when exiting the VM, which allows local guest users to cause a denial of service guest crash via unspecified vectors...

Design/Logic Flaw

Xen, when using x86 Intel processors and the VMX virtualization extension is enabled, does not properly handle cpuid instruction emulation when exiting the VM, which allows local guest users to cause a denial of service guest crash via unspecified vectors...

CVE-2011-1936

Xen, when using x86 Intel processors and the VMX virtualization extension is enabled, does not properly handle cpuid instruction emulation when exiting the VM, which allows local guest users to cause a denial of service guest crash via unspecified vectors...

CVE-2011-1936

CVE-2011-1936 concerns the Xen hypervisor on x86 with VMX enabled. The issue is that cpuid instruction emulation is not properly handled when exiting a virtual machine, which can allow a local guest user to trigger a denial of service (guest crash) via unspecified vectors. The description does no...

CVE-2011-1936

Xen, when using x86 Intel processors and the VMX virtualization extension is enabled, does not properly handle cpuid instruction emulation when exiting the VM, which allows local guest users to cause a denial of service guest crash via unspecified vectors...

ESXi 5.0 < Build 1311175 Multiple Vulnerabilities (remote check)

The remote VMware ESXi 5.0 host is affected by the following security vulnerabilities : - Multiple errors exist related to OpenSSL that could allow information disclosure or denial of service attacks. CVE-2013-0166, CVE-2013-0169 - An error exists in the libxml2 library related to the expansion o...

Host crash due to guest VMX instruction execution

ISSUE DESCRIPTION Permission checks on the emulation paths intended for guests using nested virtualization for VMLAUNCH and VMRESUME were deferred too much. The hypervisor would try to use internal state which is not set up unless nested virtualization is actually enabled for a guest. IMPACT A...

CVE-2013-2212

The vmxsetucmode function in Xen 3.3 through 4.3, when disabling caches, allows local HVM guests with access to memory mapped I/O regions to cause a denial of service CPU consumption and possibly hypervisor or guest kernel panic via a crafted GFN range...

kernel security and bug fix update

2.6.32-279.5.1.el6 - net 8021q/vlan: filter device events on bonds Neil Horman 842429 841983 2.6.32-279.4.1.el6 - fs proc: stats: Use archidletime for idle and iowait times if available Steve Best 841579 841149 - drm i915: fix integer overflow in i915gemexecbuffer2 Jacob Tanenbaum 824553 824555...

libvirt security, bug fix, and enhancement update

libvirt-0.9.10-21.0.1.el6 - Replace docs/et.png in tarball with blank image libvirt-0.9.10-21.el6 - qemu: Rollback on used USB devices rhbz743671 - qemu: Dont delete USB device on failed qemuPrepareHostdevUSBDevices rhbz743671 - Revert 'rpc: Discard non-blocking calls only when necessary'...

CVE-2012-1517

The VMX process in VMware ESXi 4.1 and ESX 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service memory overwrite and process crash or possibly execute arbitrary code on the host OS via vectors involving function pointers...

CVE-2012-1516

The VMX process in VMware ESXi 3.5 through 4.1 and ESX 3.5 through 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service memory overwrite and process crash or possibly execute arbitrary code on the host OS via vectors involving data pointers...

Design/Logic Flaw

The VMX process in VMware ESXi 4.1 and ESX 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service memory overwrite and process crash or possibly execute arbitrary code on the host OS via vectors involving function pointers...

CVE-2012-1517

The VMX process in VMware ESXi 4.1 and ESX 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service memory overwrite and process crash or possibly execute arbitrary code on the host OS via vectors involving function pointers...

CVE-2012-2449

CVE-2012-2449 describes an out-of-bounds memory write in the virtual floppy device configuration that could crash the VMX process or allow code execution on the host, given administrative guest privileges. Affected VMware products include Workstation 8.x (pre-8.0.3), Player 4.x (pre-4.0.3), Fusio...