766 matches found
Design/Logic Flaw
In FreeBSD 12.0-STABLE before r350246, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before r350247, 11.3-RELEASE before 11.3-RELEASE-p1, and 11.2-RELEASE before 11.2-RELEASE-p12, the emulated XHCI device included with the bhyve hypervisor did not properly validate data provided by the guest,...
CVE-2019-5604
CVE-2019-5604 affects FreeBSD’s bhyve XHCI emulated device. The underlying issue is in the function pci_xhci_device_doorbell(), which does not validate the guest-provided values for the identifiers ‘epid’ and ‘streamid’, allowing an out-of-bounds read. Impact: a misbehaving bhyve guest could cras...
CVE-2019-5604
In FreeBSD 12.0-STABLE before r350246, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before r350247, 11.3-RELEASE before 11.3-RELEASE-p1, and 11.2-RELEASE before 11.2-RELEASE-p12, the emulated XHCI device included with the bhyve hypervisor did not properly validate data provided by the guest,...
CVE-2019-5604: Out-of-bounds Read
In FreeBSD 12.0-STABLE before r350246, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before r350247, 11.3-RELEASE before 11.3-RELEASE-p1, and 11.2-RELEASE before 11.2-RELEASE-p12, the emulated XHCI device included with the bhyve hypervisor did not properly validate data provided by the guest,...
FreeBSD-SA-19:16.bhyve
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-19:16.bhyve Security Advisory The FreeBSD Project Topic: Bhyve out-of-bounds read in XHCI device Category: core Module: bhyve Announced: 2019-07-24 Credits: Ren...
FreeBSD -- Bhyve out-of-bounds read in XHCI device
Problem Description: The pcixhcidevicedoorbell function does not validate the 'epid' and 'streamid' provided by the guest, leading to an out-of-bounds read. Impact: A misbehaving bhyve guest could crash the system or access memory that it should not be able to...
PT-2019-17773 · Freebsd · Bhyve +1
Name of the Vulnerable Software and Affected Versions: FreeBSD versions 11.2-RELEASE through 11.2-RELEASE-p11 FreeBSD versions 11.3-RELEASE through 11.3-RELEASE-p0 FreeBSD versions 12.0-RELEASE through 12.0-RELEASE-p7 FreeBSD versions 11.3-STABLE before r350247 FreeBSD versions 12.0-STABLE before...
CVE-2019-0161
Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial of service via local access...
CVE-2019-0161
Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial of service via local access...
DEBIAN-CVE-2019-0161
Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial of service via local access...
CVE-2019-0161
Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial of service via local access...
Stack overflow
Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial of service via local access...
CVE-2019-0161
Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial of service via local access...
CVE-2019-0161
CVE-2019-0161 is an EDK II/EDK firmware vulnerability described as a stack overflow in XHCI that could allow a local attacker to cause a denial of service. Public advisories across multiple vendors/distros reference this CVE among a set of EDK II issues. Affected products seen in the connected do...
CVE-2019-0161
Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial of service via local access...
CVE-2019-0161
Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial of service via local access...
CVE-2019-0161: Out-of-bounds Write
Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial of service via local access...
OracleVM 3.4 : Unbreakable / etc (OVMSA-2019-0002)
The remote OracleVM system is missing necessary patches to address critical security updates : - rds: congestion updates can be missed when kernel low on memory Mukesh Kacker Orabug: 28425811 - net/rds: ib: Fix endless RNR Retries caused by memory allocation failures Venkat Venkatsubra Orabug:...
Unbreakable Enterprise kernel security update
4.1.12-124.24.5 - rds: congestion updates can be missed when kernel low on memory Mukesh Kacker Orabug: 28425811 - net/rds: ib: Fix endless RNR Retries caused by memory allocation failures Venkat Venkatsubra Orabug: 28127993 - net: rds: fix excess initialization of the recv SGEs Zhu Yanjun Orabug...
Debian DSA-3991-1 : qemu - security update
Multiple vulnerabilities were found in qemu, a fast processor emulator : - CVE-2017-9375 Denial of service via memory leak in USB XHCI emulation. - CVE-2017-12809 Denial of service in the CDROM device drive emulation. - CVE-2017-13672 Denial of service in VGA display emulation. - CVE-2017-13711...