Design/Logic Flaw

The VMX process in VMware ESXi 4.1 and ESX 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service memory overwrite and process crash or possibly execute arbitrary code on the host OS via vectors involving function pointers...

CVE-2012-1517

The VMX process in VMware ESXi 4.1 and ESX 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service memory overwrite and process crash or possibly execute arbitrary code on the host OS via vectors involving function pointers...

CVE-2012-1516

Vulnerability CVE-2012-1516 affects VMware VMX RPC handling in ESXi/ESX 3.5–4.1 (and related Workstation/Player components). A guest user could cause a denial of service or, potentially, execute code on the host via data-pointer related paths. Exploitation relies on triggering problematic RPC han...

CVE-2012-1517

CVE-2012-1517 affects VMware ESXi/ESX 4.1 where the VMX process mishandles RPC commands, allowing a guest user to cause a memory overwrite and denial of service or potentially execute code on the host via function pointer vectors. Connected sources confirm the issue is tied to RPC handling in VMX...

CVE-2012-2449

CVE-2012-2449 describes an out-of-bounds memory write in the virtual floppy device configuration that could crash the VMX process or allow code execution on the host, given administrative guest privileges. Affected VMware products include Workstation 8.x (pre-8.0.3), Player 4.x (pre-4.0.3), Fusio...

CVE-2012-1516: Improper Restriction of Operations within the Bounds of a Memory Buffer

The VMX process in VMware ESXi 3.5 through 4.1 and ESX 3.5 through 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service memory overwrite and process crash or possibly execute arbitrary code on the host OS via vectors involving data pointers...

PT-2012-3322

Name of the Vulnerable Software and Affected Versions VMware ESXi versions 3.5 through 4.1 VMware ESX versions 3.5 through 4.1 Description The issue is related to the VMX process in VMware products, which does not properly handle RPC commands. This can be exploited by guest OS users to cause a...

PT-2012-3323

Name of the Vulnerable Software and Affected Versions VMware ESXi versions 4.1 VMware ESX versions 4.1 Description The issue is related to the VMX process in VMware ESXi and ESX, which does not properly handle RPC commands. This can be exploited by guest OS users to cause a denial of service,...

CVE-2012-1517: Improper Restriction of Operations within the Bounds of a Memory Buffer

The VMX process in VMware ESXi 4.1 and ESX 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service memory overwrite and process crash or possibly execute arbitrary code on the host OS via vectors involving function pointers...

SureBackup for a Virtual Machine with excluded disks

Challenge How to run a VM directly from a backup file if some of its disks are excluded from backup. Solution To run a VM directly from a backup file, make sure you select 'Remove excluded disks from VM configuration' option when excluding your disks from the backup: More Information If the 'Remo...

PT-2014-2120

Name of the Vulnerable Software and Affected Versions Xen affected versions not specified Description The issue is related to the handling of cpuid instruction emulation when exiting the VM. Local guest users can cause a denial of service, resulting in a guest crash, via unspecified vectors when...

kernel security and bug fix update

2.6.32-71.24.1.el6 - fs Revert 'fs inotify: stop kernel memory leak on file creation failure' Eric Paris 656831 656832 CVE-2010-4250 2.6.32-71.23.1.el6 - x86 Revert 'x86 mtrr: Assume SYSCFGTom2ForceMemTypeWB exists on all future AMD CPUs' Frank Arnold 683813 652208 2.6.32-71.22.1.el6 - rebuild...

VMware Products 'vmware-vmx' Information Disclosure Vulnerability (VMSA-2010-0007) - Linux

VMware products are prone to an information disclosure vulnerability. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

VMware Products 'vmware-vmx' Information Disclosure Vulnerability (VMSA-2010-0007) - Windows

VMware products are prone to an information disclosure vulnerability. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

kvm security and bug fix update

83-105.0.1.el54.7 - Add kvm-add-oracle-workaround-for-libvirt-bug.patch kvm-83-105.el54.7 - kvm-qemu-virtio-net-do-not-return-stack-pointer-from-fun.patch bz524557 - Resolves: bz524557 QEMU crash during virtio-net WHQL tests for Win2008 R2 kvm-83-105.el54.6 -...

openSUSE Security Update : kernel (kernel-932)

This Linux kernel update for openSUSE 11.1 fixes lots of bugs and some security issues. The kernel was also updated to the 2.6.27.23 stable release. Following security issues have been fixed: CVE-2009-1439: Buffer overflow in fs/cifs/connect.c in CIFS in the Linux kernel 2.6.29 and earlier allows...

Debian DSA-1800-1 : linux-2.6 - denial of service/privilege escalation/sensitive memory leak

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service, privilege escalation or a sensitive memory leak. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0028 Chris Evans discovered a situation in which ...

Design/Logic Flaw

The vmxsetmsr function in arch/x86/kvm/vmx.c in the VMX implementation in the KVM subsystem in the Linux kernel before 2.6.29.1 on the i386 platform allows guest OS users to cause a denial of service OOPS by setting the EFERLME aka "Long mode enable" bit in the Extended Feature Enable Register EF...

CVE-2009-1242

The vmxsetmsr function in arch/x86/kvm/vmx.c in the VMX implementation in the KVM subsystem in the Linux kernel before 2.6.29.1 on the i386 platform allows guest OS users to cause a denial of service OOPS by setting the EFERLME aka "Long mode enable" bit in the Extended Feature Enable Register EF...

CVE-2009-1242

CVE-2009-1242: In the Linux kernel, the vmx_set_msr function of the KVM VMX implementation (arch/x86/kvm/vmx.c) on i386 allowed a local guest OS user to trigger a denial of service (OOPS) by setting the EFER_LME bit in the EFER MSR. The issue affects kernel versions before 2.6.29.1 and is tied to...