CVE-2015-7945: Exposure of Sensitive Information to an Unauthorized Actor

The RESTful control interface aka RAPI or ganeti-rapi in Ganeti before 2.9.7, 2.10.x before 2.10.8, 2.11.x before 2.11.8, 2.12.x before 2.12.6, 2.13.x before 2.13.3, 2.14.x before 2.14.2, and 2.15.x before 2.15.2 allows remote attackers to obtain the DRBD secret via instance information job resul...

Debian Security Advisory DSA 3431-1 (ganeti - security update)

Pierre Kim discovered two vulnerabilities in the restful API of Ganeti, a virtual server cluster management tool. SSL parameter negotiation could result in denial of service and the DRBD secret could leak. OpenVAS Vulnerability Test $Id: deb3431.nasl 7045 2017-09-01 12:49:31Z asteins $...

Debian: Security Advisory (DSA-3431-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 3431-2] ganeti regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3431-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 14, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3431-2] ganeti regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3431-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 14, 2016 https://www.debian.org/security/faq -...

DSA-3431-2 ganeti - regression update

Bulletin has no description...

Debian DSA-3431-1 : ganeti - security update

Pierre Kim discovered two vulnerabilities in the restful API of Ganeti, a virtual server cluster management tool. SSL parameter negotiation could result in denial of service and the DRBD secret could leak. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...

Ganeti Denial Of Service / Information Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory Information Title: Ganeti Security Advisory DoS, Unauthenticated Info Leak Advisory URL: https://pierrekim.github.io/advisories/2016-ganeti-0x00.txt Blog URL: https://pierrekim.github.io/blog/2016-01-05-Ganeti-Info-Leak-DoS.html Date...

[SECURITY] [DSA 3431-1] ganeti security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3431-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 01, 2016 https://www.debian.org/security/faq -...

DSA-3431-1 ganeti - security update

Bulletin has no description...

PT-2017-7302

Name of the Vulnerable Software and Affected Versions Ganeti versions prior to 2.9.7 Ganeti versions 2.10.x prior to 2.10.8 Ganeti versions 2.11.x prior to 2.11.8 Ganeti versions 2.12.x prior to 2.12.6 Ganeti versions 2.13.x prior to 2.13.3 Ganeti versions 2.14.x prior to 2.14.2 Ganeti versions...

SUSE Linux Enterprise Compromise Protected Information

The drbd-kmp-xen package of the SUSE Linux Enterprise operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

SUSE Linux Enterprise Compromise Protected Information

The multiple vulnerabilities in the drbd-kmp-smp package of the SUSE Linux Enterprise operating system can lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

OpenSUSE Data Compromise

The multiple vulnerabilities in the drbd-kmp-default package of the OpenSUSE operating system can lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited locally...

OpenSUSE Data Compromise

The multiple vulnerabilities in the drbd-kmp-xen package of the OpenSUSE operating system can lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

openSUSE Compromise Protected Information

The drbd-kmp-debug package of the OpenSUSE operating system has multiple vulnerabilities. Exploiting these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

SUSE Linux Enterprise Compromise Protected Information

The drbd-kmp-iseries64 package of the SUSE Linux Enterprise operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

SUSE Linux Enterprise Compromise Protected Information

The multiple vulnerabilities in the drbd-kmp-xenpae package of the SUSE Linux Enterprise operating system can lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

SUSE Linux Enterprise Compromise Protected Information

The multiple vulnerabilities in the drbd package of the SUSE Linux Enterprise operating system can lead to a violation of the accessibility of protected information. Exploitation of these vulnerabilities can be carried out remotely...

SUSE Linux Enterprise Compromise Protected Information

The multiple vulnerabilities in the drbd-kmp-bigsmp package of the SUSE Linux Enterprise operating system can lead to a violation of the accessibility of protected information. Exploitation of these vulnerabilities can be carried out remotely...