Design/Logic Flaw

An inaccurate frame deduplication process in ChirpStack Network Server 3.9.0 allows a malicious gateway to perform uplink Denial of Service via malformed frequency attributes in CollectAndCallOnceCollect in internal/uplink/collect.go. NOTE: the vendor's position is that there are no "guarantees...

CVE-2020-28349

CVE-2020-28349 affects ChirpStack Network Server 3.9.0. The issue is an inaccurate frame deduplication in internal/uplink/collect.go, allowing a malicious gateway to cause uplink DoS via malformed frequency attributes in CollectAndCallOnceCollect. Public sources (Red Hat, Veracode, CNVD, PT-Secur...

Microsoft announces new Project OneFuzz framework, an open source developer tool to find and fix bugs at scale

Microsoft is dedicated to working with the community and our customers to continuously improve and tune our platform and products to help defend against the dynamic and sophisticated threat landscape. Earlier this year, we announced that we would replace the existing software testing experience...

binutils security and bug fix update

2.30-73.0.1 - Forward-port of Oracle patches from 2.30-68.0.2. - Reviewed-by: Elena Zannoni 2.30-68.0.2 - Backport the non-cycle-detecting-capable deduplicating CTF linker - Backport a fix for an upstream hashtab crash no upstream bug number, triggered by the above. - Fix deduplication of...

Deduplication filter marks files as deleted incorrectly and data corruption occurs on Windows Server 2012 R2 file server

Deduplication filter marks files as deleted incorrectly and data corruption occurs on Windows Server 2012 R2 file server This article describes an issue in which deduplication filter marks files as deleted incorrectly and data corruption occurs on Windows Server 2012 R2-based file server. Before...

Stop error 0x9E and failover cluster can't come online in Windows Server 2012

Stop error 0x9E and failover cluster can't come online in Windows Server 2012 Symptoms This issue occurs when the following conditions are true: You have a Network File System NFS file server which is hosted on a two-node Windows Server 2012-based clustered storage server. You have the Data...

CVE-2020-7212

The encodeinvalidchars function in util/url.py in the urllib3 library 1.25.2 through 1.25.7 for Python allows a denial of service CPU consumption because of an inefficient algorithm. The percentencodings array contains all matches of percent encodings. It is not deduplicated. For a URL of length ...

Virtuozzo Hybrid Server 7.5 Hotfix 2 (7.5.0-605)

The Hotfix 2 for Virtuozzo Hybrid Server 7.5 provides a new feature as well as stability and usability bug fixes. Vulnerability id: PSBM-124770 Ploop corruptions after updating to Virtuozzo Hybrid Server 7.5. Vulnerability id: PSBM-124714 libvirt could hang while reading large output from iptable...

Repository 'Used Space' Value Greater Than 'Capacity'

Challenge A Repository listed under Backup Infrastructure Backup Repositories has a 'Used Space' value that is greater than the 'Capacity' of the storage. Cause This occurs when repositories are backed by storage that has the ability to reduce the space used by restore points, like deduplication...

macOS XNU - Copy-on-Write Behaviour Bypass via Partial-Page Truncation of File Exploit

/ XNU has various interfaces that permit creating copy-on-write copies of data between processes, including out-of-line message descriptors in mach messages. It is important that the copied memory is protected against later modifications by the source process; otherwise, the source process might ...

macOS XNU - Copy-on-Write Behaviour Bypass via Partial-Page Truncation of File

/ XNU has various interfaces that permit creating copy-on-write copies of data between processes, including out-of-line message descriptors in mach messages. It is important that the copied memory is protected against later modifications by the source process; otherwise, the source process might ...

Performance Impacts of Deduplicated Storage Systems

To learn about Deduplication Appliance Best Practices, visit KB1745. Challenge The following Veeam technologies are dependent on primary backup storage random I/O performance: Instant Recovery VM/Disk/NAS/Databases Windows and Linux File Level Recovery Application Restore Cloud Tiering Cloud...

‘The revision level is unknown’ upon Guest OS File restore

Challenge When attempting to restore files from a backup of a server that was running Windows 2016 or 2019 and had Deduplication enabled for some or all of the drives, the restore fails with the following error: Failed to restore "" Error: Failed to read xx bytes from the file...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15885)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the "Delete Email Alerts" method in versions of Quest DR Series disk backup software prior to version 4.0.3.1. An attacker could exploit this vulnerability to execute commands...

April 17, 2018—KB4093121 (Preview of Monthly Rollup)

None None...

restic cryptography

tl;dr: this is not an audit and I take no responsibility for your backups, but I had a quick look at the crypto and I think I'm going to use restic for my personal backups. I keep hearing good things about restic. I am redoing my storage solution, and restic seems to tick all the boxes for my...

Attic 'attic/archiver.py' security bypass vulnerability

Attic is a Python based data backup program that uses deduplication technology. A security bypass vulnerability exists in Attic. An attacker could use this vulnerability to bypass security restrictions and perform unauthorized operations...

July 18, 2017—KB4025334 (OS Build 14393.1532)

None None...

PT-2017-4328

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 4.4.0-96.119 and later Description: A flaw in the Linux kernel's memory deduplication mechanism, specifically in the Kernel Samepage Merging KSM component, can create a side channel. This allows an attacker to potentiall...

Creating a backup storage dump

Purpose This article documents how to create a "storage dump" from a Veeam backup file. The storage dump is a human-readable output of the backup file's metadata containing: Backup file parameters FIB files-in-backup hierarchy FIB blocks map Offset / size / compression type of data blocks...