CVEs published January 7, 2014
12 CVEs were published on January 7, 2014: 0 critical, 0 high.
- Published
- 12
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 12
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- apache-libcloud
- 1
- nova
- 1
Medium, low and unrated 12
- CVE-2011-1166Xen, possibly before 4.0.2, allows local 64-bit PV guests to cause a denial of service (host crash) by specifying user mode execution withou
- CVE-2011-1763The get_free_port function in Xen allows local authenticated DomU users to cause a denial of service or possibly gain privileges via unspeci
- CVE-2011-1780The instruction emulation in Xen 3.0.3 allows local SMP guest users to cause a denial of service (host crash) by replacing the instruction t
- CVE-2011-1936Xen, when using x86 Intel processors and the VMX virtualization extension is enabled, does not properly handle cpuid instruction emulation w
- CVE-2013-6436The lxcDomainGetMemoryParameters method in lxc/lxc_driver.c in libvirt 1.0.5 through 1.2.0 does not properly check the status of LXC guests
- CVE-2013-4969Puppet before 3.3.3 and 3.4 before 3.4.1 and Puppet Enterprise (PE) before 2.8.4 and 3.1 before 3.1.1 allows local users to overwrite arbitr
- CVE-2013-6419Interaction error in OpenStack Nova and Neutron before Havana 2013.2.1 and icehouse-1 does not validate the instance ID of the tenant makingnova
- CVE-2013-6480Libcloud 0.12.3 through 0.13.2 does not set the scrub_data parameter for the destroy DigitalOcean API, which allows local users to obtain seapache-libcloud
- CVE-2013-4564Libreswan 3.6 allows remote attackers to cause a denial of service (crash) via a small length value and (1) no version or (2) an invalid maj
- CVE-2013-6881CRU Ditto Forensic FieldStation with firmware before 2013Oct15a allows remote attackers to execute arbitrary commands via shell metacharacte
- CVE-2013-6884The write-blocker in CRU Ditto Forensic FieldStation with firmware before 2013Oct15a has a default "ditto" username and password, which allo
- CVE-2013-6888Uscan in devscripts before 2.13.9 allows remote attackers to execute arbitrary code via a crafted tarball.