July 18, 2017—KB4025334 (OS Build 14393.1532)

None None...

PT-2017-4328

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 4.4.0-96.119 and later Description: A flaw in the Linux kernel's memory deduplication mechanism, specifically in the Kernel Samepage Merging KSM component, can create a side channel. This allows an attacker to potentiall...

Creating a backup storage dump

Purpose This article documents how to create a "storage dump" from a Veeam backup file. The storage dump is a human-readable output of the backup file's metadata containing: Backup file parameters FIB files-in-backup hierarchy FIB blocks map Offset / size / compression type of data blocks...

DEBIAN-CVE-2015-2877

Kernel Samepage Merging KSM in the Linux kernel 2.6.32 through 4.x does not prevent use of a write-timing side channel, which allows guest OS users to defeat the ASLR protection mechanism on other guest OS instances via a Cross-VM ASL INtrospection CAIN attack. NOTE: the vendor states "Basically ...

CVE-2015-2877

Kernel Samepage Merging KSM in the Linux kernel 2.6.32 through 4.x does not prevent use of a write-timing side channel, which allows guest OS users to defeat the ASLR protection mechanism on other guest OS instances via a Cross-VM ASL INtrospection CAIN attack. NOTE: the vendor states "Basically ...

UBUNTU-CVE-2015-2877

DISPUTED Kernel Samepage Merging KSM in the Linux kernel 2.6.32 through 4.x does not prevent use of a write-timing side channel, which allows guest OS users to defeat the ASLR protection mechanism on other guest OS instances via a Cross-VM ASL INtrospection CAIN attack. NOTE: the vendor states...

CVE-2015-2877

Kernel Samepage Merging KSM in the Linux kernel 2.6.32 through 4.x does not prevent use of a write-timing side channel, which allows guest OS users to defeat the ASLR protection mechanism on other guest OS instances via a Cross-VM ASL INtrospection CAIN attack. NOTE: the vendor states "Basically ...

CVE-2015-2877

Kernel Samepage Merging KSM in the Linux kernel 2.6.32 through 4.x does not prevent use of a write-timing side channel, which allows guest OS users to defeat the ASLR protection mechanism on other guest OS instances via a Cross-VM ASL INtrospection CAIN attack. NOTE: the vendor states "Basically ...

PT-2017-1614 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 2.6.32 through 4.x Description: The issue is related to the Kernel Samepage Merging KSM component in the Linux kernel, which does not prevent the use of a write-timing side channel. This allows guest OS users to defeat t...

Cluster service fails when shutting down or data deduplication fails with "Drive is locked" in Windows Server 2012 R2

Cluster service fails when shutting down or data deduplication fails with "Drive is locked" in Windows Server 2012 R2 This article describes two issues that are addressed in this update: the cluster service fails when it's being shut down and data deduplication fails with the "This drive is locke...

June 2016 update rollup for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2

June 2016 update rollup for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 This update rollup is superseded by July 2016 update rollup for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 KB3172614 that was released on July 21, 2016. The June 2016 update rollup for Windows RT 8.1,...

[SECURITY] Fedora 25 Update: borgbackup-1.0.9-1.fc25

BorgBackup short: Borg is a deduplicating backup program. Optionally, it supports compression and authenticated encryption...

Deduplication Ratio Does Not Reflect Deduplicating Storage

Challenge In the backup properties, the "Data Size" or "Backup Size" is larger than expected, or the "Deduplication" column in the backup statistics is different from the ratio reported by duplicating storage appliances. Cause Veeam Backup & Replication does not request information from storage...

Unable to Delete Credentials

Challenge When attempting to delete credentials from the credentials manager, a message box states: Unable to delete credentials because they are currently in use. See details for more info. Cause You cannot delete a record that is already used for any component in the backup infrastructure...

[SECURITY] Fedora 23 Update: borgbackup-1.0.7-1.fc23

BorgBackup short: Borg is a deduplicating backup program. Optionally, it supports compression and authenticated encryption...

“File does not exist” error after rename failure on deduplication appliance

“File does not exist” error after rename failure on deduplication appliance...

ExaGrid Unauthorized Access Vulnerability

ExaGrid is a Linux-based backup and recovery storage appliance from ExaGrid, Inc. that provides deduplication capabilities. A security vulnerability exists in ExaGrid, which can be exploited by attackers to gain unauthorized access...

Virtual Machine Monitors (VMM) contain a memory deduplication vulnerability

Overview Multiple vendors' implementations of Virtual Machine Monitors VMM are vulnerable to a memory deduplication attack. Description As reported in the "Cross-VM ASL INtrospection CAIN" paper, an attacker with basic user rights within the attacking Virtual Machine VM can leverage memory...

Attic 'attic/archiver.py' security bypass vulnerability

Attic is a Python based data backup program that uses deduplication technology. A security bypass vulnerability exists in Attic. An attacker could use this vulnerability to bypass security restrictions and perform unauthorized operations...

Best Practices for Microsoft Data Deduplication

Purpose This article documents Best Practices, Limitations, and Considerations relating to the use of storage that has Microsoft Windows Deduplication enabled when storing backup files created and managed by Veeam Backup & Replication. Considerations and Recommendations CRITICAL Veeam strongly...