EUVD-2010-0450

Malware in sbrugna...

EUVD-2015-2261

Malware in sbrugna...

EUVD-2010-0329

Malware in sbrugna...

CBL Mariner 2.0 Security Update: kernel (CVE-2010-0298)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2010-0298 advisory. - The x86 emulator in KVM 83 does not use the Current Privilege Level CPL and I/O Privilege Level IOPL in...

SUSE CVE-2010-0306

The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing SMP, does not use the Current Privilege Level CPL and I/O Privilege Level IOPL to restrict instruction execution, which allows guest OS users to cause a denial of service guest OS crash or gain privileges on the...

SUSE CVE-2010-0419

The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing SMP, does not properly restrict writing of segment selectors to segment registers, which might allow guest OS users to cause a denial of service guest OS crash or gain privileges on the guest OS by leveraging...

GSD-2022-1002875 KVM: x86: avoid calling x86 emulator without a decoded instruction

KVM: x86: avoid calling x86 emulator without a decoded instruction This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.2 by commit...

PT-2022-31920

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.120 Description The issue is related to the KVM x86 emulator. It was introduced in version v5.10.61 and fixed in version v5.10.120. The actual impact and attack plausibility have not yet been proven...

PT-2022-31720

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.45 Description The issue is related to the x86 emulator in KVM, where it could be called without a decoded instruction. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

PT-2022-31138

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.2 Description The issue is related to the KVM x86 emulator. It was introduced in version v5.12 and fixed in version v5.18.2. The actual impact and attack plausibility have not yet been proven. Recommendatio...

PT-2022-31445

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.13 Description The issue is related to the KVM x86 emulator. It avoids calling the x86 emulator without a decoded instruction. The actual impact and attack plausibility have not yet been proven...

Unbreakable Enterprise kernel-container security update

5.4.17-2136.307.3.5 - KVM: x86: avoid calling x86 emulator without a decoded instruction Sean Christopherson Orabug: 34211496 CVE-2022-1852...

UVI-2021-1000999 KVM: X86: Fix x86_emulator slab cache leak

KVM: X86: Fix x86emulator slab cache leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

PT-2021-25551

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.13 Description: A slab cache leak was discovered in the x86 emulator of KVM. The issue was introduced in version v5.7 and is fixed in Linux Kernel version v5.12.13. The actual impact and attack plausibilit...

PT-2021-29545

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.13 Description A slab cache leak was discovered in the x86 emulator of KVM. The issue was introduced in version v5.7 and is fixed in Linux Kernel version v5.12.13. The actual impact and attack plausibility...

PT-2021-25470

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.46 Description: A slab cache leak was discovered in the x86 emulator of KVM. The issue was introduced in version v5.7 and is fixed in Linux Kernel version v5.10.46. The actual impact and attack plausibilit...

PT-2021-29464

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.46 Description A slab cache leak was discovered in the x86 emulator of KVM. The issue was introduced in version v5.7 and is fixed in Linux Kernel version v5.10.46. The actual impact and attack plausibility...

The x86 emulator in KVM 83 does not use the Current Privilege Level (CPL) and I/O Privilege Level (IOPL) in determining the memory access available to CPL3 code which allows guest OS users to cause a denial of service (guest OS crash) or gain privileges on the guest OS by leveraging access to a (1) IO port or (2) MMIO region a related issue to CVE-2010-0306.

...

Microsoft MsMpEng - mpengine x86 Emulator Heap Corruption in VFS API Exploit

Exploit for windows platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1282&desc=2 In issue 1260 I discussed Microsoft's "apicall" instruction that can invoke a large number of internal emulator apis and is exposed to remote attackers by default in al...

Microsoft Malware Protection Engine < 1.1.13804 Multiple Vulnerabilities

The version of Microsoft Malware Protection Engine MMPE installed on the remote Windows host is prior to 1.1.13804.0. It is, therefore, affected by multiple vulnerabilities : - Multiple denial of service vulnerabilities exist due to improper scanning of specially crafted files. An unauthenticated...