redhat enterprise linux openstack platform 5 vulnerabilities and exploits

(subscribe to this query)

QEMU prior to 2.0.0 block drivers for CLOOP, QCOW2 version 2 and various other image formats are vulnerable to potential memory corruptions, integer/buffer overflows or crash caused by missing input validations which could allow a remote user to execute arbitrary code on the host...

Qemu Qemu Redhat Enterprise Linux Server Aus 6.5 Redhat Enterprise Linux Server Tus 6.5 Redhat Enterprise Linux Desktop 6.0 Redhat Enterprise Linux Server 6.0 Redhat Enterprise Linux Workstation 6.0 Redhat Virtualization 3.0 Redhat Enterprise Linux Eus 6.5 Redhat Enterprise Linux Openstack Platform 5

Qemu prior to 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite loops and other potential issues when calculating BAT entries, due to missing bounds checks for block_size and logical_sector_size variables. These are used to derive other fields like 'sectors_...

Qemu Qemu Redhat Enterprise Linux Server Aus 6.5 Redhat Enterprise Linux Server Tus 6.5 Redhat Enterprise Linux Desktop 6.0 Redhat Enterprise Linux Server 6.0 Redhat Enterprise Linux Workstation 6.0 Redhat Virtualization 3.0 Redhat Enterprise Linux Eus 6.5 Redhat Enterprise Linux Openstack Platform 5

Qemu prior to 1.6.2 block diver for the various disk image formats used by Bochs and for the QCOW version 2 format, are vulnerable to a possible crash caused by signed data types or a logic error while creating QCOW2 snapshots, which leads to incorrectly calling update_refcount()...

Qemu Qemu Fedoraproject Fedora 20 Redhat Enterprise Linux Server Aus 6.5 Redhat Enterprise Linux Server Tus 6.5 Redhat Enterprise Linux Desktop 6.0 Redhat Enterprise Linux Server 6.0 Redhat Enterprise Linux Workstation 6.0 Redhat Virtualization 3.0 Redhat Enterprise Linux Eus 6.5 Redhat Enterprise Linux Openstack Platform 5

Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of streams and sends an invalid request over each stream that should solicit a stream of RST_STREAM frames from the peer. Depending on how the peer...

1 Article

Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service. The attacker sends a stream of SETTINGS frames to the peer. Since the RFC requires that the peer reply with one acknowledgement per SETTINGS frame, an empty SETTINGS frame ...

A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "virt_ext" fiel...

1 Github repository

In Bootstrap prior to 3.4.1 and 4.3.x prior to 4.3.1, XSS is possible in the tooltip or popover data-template attribute.

Getbootstrap Bootstrap F5 Big-ip Local Traffic Manager F5 Big-ip Application Security Manager F5 Big-ip Access Policy Manager F5 Big-ip Advanced Firewall Manager F5 Big-ip Analytics F5 Big-ip Application Acceleration Manager F5 Big-ip Domain Name System F5 Big-ip Fraud Protection Service F5 Big-ip Global Traffic Manager F5 Big-ip Link Controller F5 Big-ip Policy Enforcement Manager F5 Big-ip Webaccelerator F5 Big-ip Edge Gateway Redhat Virtualization Manager 4.3 Tenable Tenable.sc

6 Github repositories

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook