jetlib.sec » Tags » kvm

Feeds

133365 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

40 items tagged "kvm"

Related tags: red hat security [+], privilege escalation vulnerability [+], local privilege escalation [+], intel 64 [+], host [+], qemu [+], red [+], privileged guest [+], network interface card [+], escalation [+], driver [+], virtio [+], timer function [+], queue [+], null pointer [+], multiple [+], local [+], information disclosure [+], device [+], denial [+], linux kernel [+], linux [+], kernel [+], vulnerability [+], vnc [+], security [+], pad field [+], new [+], integer overflow vulnerability [+], information disclosure vulnerability [+], service vulnerability [+], denial of service [+]

• May 22, 2012
• 0:00

  Vuln: Linux Kernel KVM 'kvm_apic_accept_pic_intr()' Function Local Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel KVM 'kvm_apic_accept_pic_intr()' Function Local Denial of Service Vulnerability

  Tags:  kvm kernel linux service-vulnerability linux-kernel denial-of-service  

• 0:00

  Vuln: KVM CVE-2012-2121 Local Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  KVM CVE-2012-2121 Local Denial of Service Vulnerability

  Tags:  kvm denial local service-vulnerability denial-of-service  

• May 21, 2012
• 17:19

  Red Hat Security Advisory 2012-0676-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2012-0676-01 - KVM is a full virtualization solution for Linux on AMD64 and Intel 64 systems. KVM is a Linux kernel module built for the standard Red Hat Enterprise Linux kernel. A flaw was found in the way the KVM_CREATE_IRQCHIP ioctl was handled. Calling this ioctl when at least one virtual CPU already existed could lead to a NULL pointer dereference later when the VCPU is scheduled to run. A malicious user in the kvm group on the host could use this flaw to crash the host. A flaw was found in the way device memory was handled during guest device removal. Upon successful device removal, memory used by the device was not properly unmapped from the corresponding IOMMU or properly released from the kernel, leading to a memory leak. A malicious user in the kvm group on the host who has the ability to assign a device to a guest could use this flaw to crash the host.

  Tags:  kvm device host red-hat-security linux-kernel intel-64  

• 17:19

  Red Hat Security Advisory 2012-0676-01

   » ‎ Packet Storm Security Recent Files
  Red Hat Security Advisory 2012-0676-01 - KVM is a full virtualization solution for Linux on AMD64 and Intel 64 systems. KVM is a Linux kernel module built for the standard Red Hat Enterprise Linux kernel. A flaw was found in the way the KVM_CREATE_IRQCHIP ioctl was handled. Calling this ioctl when at least one virtual CPU already existed could lead to a NULL pointer dereference later when the VCPU is scheduled to run. A malicious user in the kvm group on the host could use this flaw to crash the host. A flaw was found in the way device memory was handled during guest device removal. Upon successful device removal, memory used by the device was not properly unmapped from the corresponding IOMMU or properly released from the kernel, leading to a memory leak. A malicious user in the kvm group on the host who has the ability to assign a device to a guest could use this flaw to crash the host.

  Tags:  kvm device host red-hat-security linux-kernel intel-64  

• 0:00

  Vuln: KVM CVE-2012-2121 Local Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  KVM CVE-2012-2121 Local Denial of Service Vulnerability

  Tags:  kvm denial local service-vulnerability denial-of-service  

• May 18, 2012
• 0:00

  Vuln: Linux Kernel KVM 'kvm_apic_accept_pic_intr()' Function Local Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel KVM 'kvm_apic_accept_pic_intr()' Function Local Denial of Service Vulnerability

  Tags:  kvm kernel linux service-vulnerability linux-kernel denial-of-service  

• May 01, 2012
• 0:00

  Vuln: Linux Kernel KVM CVE-2012-0045 Local Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel KVM CVE-2012-0045 Local Denial of Service Vulnerability

  Tags:  kvm kernel linux service-vulnerability linux-kernel denial-of-service  

• March 26, 2012
• 0:00

  Vuln: Linux Kernel KVM CVE-2012-0045 Local Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel KVM CVE-2012-0045 Local Denial of Service Vulnerability

  Tags:  kvm kernel linux service-vulnerability linux-kernel denial-of-service  

• March 08, 2012
• 0:00

  Vuln: Linux Kernel KVM 'create_pit_timer()' Function Local Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel KVM 'create_pit_timer()' Function Local Denial of Service Vulnerability

  Tags:  kvm kernel linux service-vulnerability timer-function linux-kernel  

• February 21, 2012
• 7:29

  Red Hat Security Advisory 2012-0149-03

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2012-0149-03 - KVM is a full virtualization solution for Linux on AMD64 and Intel 64 systems. KVM is a Linux kernel module built for the standard Red Hat Enterprise Linux kernel. It was found that the kvm_vm_ioctl_assign_device() function in the KVM subsystem of a Linux kernel did not check if the user requesting device assignment was privileged or not. A member of the kvm group on the host could assign unused PCI devices, or even devices that were in use and whose resources were not properly claimed by the respective drivers, which could result in the host crashing.

  Tags:  kvm red linux red-hat-security linux-kernel intel-64  

• 7:29

  Red Hat Security Advisory 2012-0149-03

   » ‎ Packet Storm Security Recent Files
  Red Hat Security Advisory 2012-0149-03 - KVM is a full virtualization solution for Linux on AMD64 and Intel 64 systems. KVM is a Linux kernel module built for the standard Red Hat Enterprise Linux kernel. It was found that the kvm_vm_ioctl_assign_device() function in the KVM subsystem of a Linux kernel did not check if the user requesting device assignment was privileged or not. A member of the kvm group on the host could assign unused PCI devices, or even devices that were in use and whose resources were not properly claimed by the respective drivers, which could result in the host crashing.

  Tags:  kvm red linux red-hat-security linux-kernel intel-64  

• 7:29

  Red Hat Security Advisory 2012-0149-03

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2012-0149-03 - KVM is a full virtualization solution for Linux on AMD64 and Intel 64 systems. KVM is a Linux kernel module built for the standard Red Hat Enterprise Linux kernel. It was found that the kvm_vm_ioctl_assign_device() function in the KVM subsystem of a Linux kernel did not check if the user requesting device assignment was privileged or not. A member of the kvm group on the host could assign unused PCI devices, or even devices that were in use and whose resources were not properly claimed by the respective drivers, which could result in the host crashing.

  Tags:  kvm red linux red-hat-security linux-kernel intel-64  

• January 24, 2012
• 0:00

  Vuln: Linux Kernel KVM 'create_pit_timer()' Function Local Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel KVM 'create_pit_timer()' Function Local Denial of Service Vulnerability

  Tags:  kvm kernel linux service-vulnerability timer-function linux-kernel  

• January 23, 2012
• 20:16

  Red Hat Security Advisory 2012-0051-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2012-0051-01 - KVM is a full virtualization solution for Linux on AMD64 and Intel 64 systems. KVM is a Linux kernel module built for the standard Red Hat Enterprise Linux kernel. A heap overflow flaw was found in the way QEMU-KVM emulated the e1000 network interface card. A privileged guest user in a virtual machine whose network interface is configured to use the e1000 emulated driver could use this flaw to crash the host or, possibly, escalate their privileges on the host. A flaw was found in the way the KVM subsystem of a Linux kernel handled PIT IRQs when there was no virtual interrupt controller set up. A malicious user in the kvm group on the host could force this situation to occur, resulting in the host crashing.

  Tags:  kvm host linux network-interface-card red-hat-security privileged-guest  

• 20:16

  Red Hat Security Advisory 2012-0051-01

   » ‎ Packet Storm Security Recent Files
  Red Hat Security Advisory 2012-0051-01 - KVM is a full virtualization solution for Linux on AMD64 and Intel 64 systems. KVM is a Linux kernel module built for the standard Red Hat Enterprise Linux kernel. A heap overflow flaw was found in the way QEMU-KVM emulated the e1000 network interface card. A privileged guest user in a virtual machine whose network interface is configured to use the e1000 emulated driver could use this flaw to crash the host or, possibly, escalate their privileges on the host. A flaw was found in the way the KVM subsystem of a Linux kernel handled PIT IRQs when there was no virtual interrupt controller set up. A malicious user in the kvm group on the host could force this situation to occur, resulting in the host crashing.

  Tags:  kvm host linux network-interface-card red-hat-security privileged-guest  

• 20:16

  Red Hat Security Advisory 2012-0051-01

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2012-0051-01 - KVM is a full virtualization solution for Linux on AMD64 and Intel 64 systems. KVM is a Linux kernel module built for the standard Red Hat Enterprise Linux kernel. A heap overflow flaw was found in the way QEMU-KVM emulated the e1000 network interface card. A privileged guest user in a virtual machine whose network interface is configured to use the e1000 emulated driver could use this flaw to crash the host or, possibly, escalate their privileges on the host. A flaw was found in the way the KVM subsystem of a Linux kernel handled PIT IRQs when there was no virtual interrupt controller set up. A malicious user in the kvm group on the host could force this situation to occur, resulting in the host crashing.

  Tags:  kvm host linux network-interface-card red-hat-security privileged-guest  

• September 01, 2011
• 0:00

  Vuln: Linux Kernel Multiple 'kvm/x86.c' Local Information Disclosure Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel Multiple 'kvm/x86.c' Local Information Disclosure Vulnerabilities

  Tags:  kvm multiple linux-kernel information-disclosure  

• July 21, 2011
• 0:00

  Vuln: QEMU KVM 'virtio_queue_notify()' Local Privilege Escalation Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  QEMU KVM 'virtio_queue_notify()' Local Privilege Escalation Vulnerability

  Tags:  kvm virtio queue privilege-escalation-vulnerability local-privilege-escalation  

• July 07, 2011
• 0:00

  Vuln: QEMU KVM 'virtio_queue_notify()' Local Privilege Escalation Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  QEMU KVM 'virtio_queue_notify()' Local Privilege Escalation Vulnerability

  Tags:  kvm virtio queue privilege-escalation-vulnerability local-privilege-escalation  

• June 10, 2011
• 0:00

  Vuln: QEMU KVM 'virtio-blk' Driver Local Privilege Escalation Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  QEMU KVM 'virtio-blk' Driver Local Privilege Escalation Vulnerability

  Tags:  kvm qemu driver privilege-escalation-vulnerability local-privilege-escalation  

• April 26, 2011
• 0:00

  Vuln: QEMU KVM 'virtio-blk' Driver Local Privilege Escalation Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  QEMU KVM 'virtio-blk' Driver Local Privilege Escalation Vulnerability

  Tags:  kvm qemu driver privilege-escalation-vulnerability local-privilege-escalation  

• April 22, 2011
• 0:00

  Vuln: QEMU KVM 'virtio-blk' Driver Local Privilege Escalation Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  QEMU KVM 'virtio-blk' Driver Local Privilege Escalation Vulnerability

  Tags:  kvm qemu driver privilege-escalation-vulnerability local-privilege-escalation  

• March 03, 2011
• 0:00

  Vuln: Linux Kernel KVM Intel VT-x Extension NULL Pointer Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel KVM Intel VT-x Extension NULL Pointer Denial of Service Vulnerability

  Tags:  kvm kernel linux service-vulnerability null-pointer linux-kernel  

• February 14, 2011
• 0:00

  Vuln: QEMU KVM VNC Password Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  QEMU KVM VNC Password Security Bypass Vulnerability

  Tags:  vnc kvm qemu vulnerability  

• January 11, 2011
• 0:00

  Vuln: Linux Kernel 'kvm_vcpu_events.interrupt.pad' Field Local Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel 'kvm_vcpu_events.interrupt.pad' Field Local Information Disclosure Vulnerability

  Tags:  kvm kernel linux information-disclosure-vulnerability pad-field linux-kernel  

• January 03, 2011
• 0:00

  Vuln: Linux Kernel KVM Intel VT-x Extension NULL Pointer Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel KVM Intel VT-x Extension NULL Pointer Denial of Service Vulnerability

  Tags:  kvm kernel linux service-vulnerability null-pointer linux-kernel  

• December 20, 2010
• 0:00

  Vuln: Linux Kernel Multiple 'kvm/x86.c' Local Information Disclosure Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel Multiple 'kvm/x86.c' Local Information Disclosure Vulnerabilities

  Tags:  kvm multiple linux-kernel information-disclosure  

• March 24, 2010
• 0:00

  Vuln: Linux Kernel KVM Segment Selector Loading Local Privilege Escalation Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel KVM Segment Selector Loading Local Privilege Escalation Vulnerability

  Tags:  kvm kernel linux linux-kernel privilege-escalation-vulnerability local-privilege-escalation  

• 0:00

  Vuln: Linux Kernel KVM 'handle_dr()' Local Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel KVM 'handle_dr()' Local Denial of Service Vulnerability

  Tags:  kvm kernel linux service-vulnerability linux-kernel denial-of-service  

• 0:00

  Vuln: Linux Kernel KVM Multiple Privilege Escalation and Denial of Service Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel KVM Multiple Privilege Escalation and Denial of Service Vulnerabilities

  Tags:  kvm kernel linux linux-kernel denial-of-service escalation  

• March 22, 2010
• 0:00

  Vuln: Linux Kernel KVM Large SMP Instruction Local Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel KVM Large SMP Instruction Local Denial of Service Vulnerability

  Tags:  kvm kernel linux service-vulnerability linux-kernel denial-of-service  

• March 17, 2010
• 0:00

  Vuln: Linux Kernel KVM '/dev/port' Device Local Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel KVM '/dev/port' Device Local Denial of Service Vulnerability

  Tags:  kvm kernel linux service-vulnerability linux-kernel denial-of-service  

• March 10, 2010
• 16:00

  Bugtraq: [SECURITY] [DSA-2010-1] New kvm packages fix several vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  [SECURITY] [DSA-2010-1] New kvm packages fix several vulnerabilities

  Tags:  kvm security new  

• 0:00

  Vuln: Linux Kernel KVM Multiple Privilege Escalation and Denial of Service Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel KVM Multiple Privilege Escalation and Denial of Service Vulnerabilities

  Tags:  kvm kernel linux linux-kernel denial-of-service escalation  

• 0:00

  Vuln: Linux Kernel KVM Segment Selector Loading Local Privilege Escalation Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel KVM Segment Selector Loading Local Privilege Escalation Vulnerability

  Tags:  kvm kernel linux linux-kernel privilege-escalation-vulnerability local-privilege-escalation  

• March 01, 2010
• 0:00

  Vuln: Linux Kernel KVM 'handle_dr()' Local Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel KVM 'handle_dr()' Local Denial of Service Vulnerability

  Tags:  kvm kernel linux service-vulnerability linux-kernel denial-of-service  

• February 15, 2010
• 0:00

  Vuln: Linux Kernel KVM Multiple Privilege Escalation and Denial of Service Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel KVM Multiple Privilege Escalation and Denial of Service Vulnerabilities

  Tags:  kvm kernel linux linux-kernel denial-of-service escalation  

• February 04, 2010
• 0:00

  Vuln: Linux Kernel KVM '/dev/port' Device Local Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel KVM '/dev/port' Device Local Denial of Service Vulnerability

  Tags:  kvm kernel linux service-vulnerability linux-kernel denial-of-service  

• January 25, 2010
• 0:00

  Vuln: Linux Kernel KVM 'kvm_emulate_hypercall()' Local Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel KVM 'kvm_emulate_hypercall()' Local Denial of Service Vulnerability

  Tags:  kvm kernel linux service-vulnerability denial-of-service linux-kernel  

• 0:00

  Vuln: Linux Kernel KVM 'kvm_dev_ioctl_get_supported_cpuid()' Integer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel KVM 'kvm_dev_ioctl_get_supported_cpuid()' Integer Overflow Vulnerability

  Tags:  kvm kernel linux integer-overflow-vulnerability linux-kernel