About the security content of macOS High Sierra 10.13.4, Security Update 2018-002 Sierra, and Security Update 2018-002 El Capitan - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

macOS 10.13.x < 10.13.4 Multiple Vulnerabilities

Binary data 700515.prm...

Apple macOS Disk Management Password Truncation Vulnerability

Apple macOS High Sierra is a dedicated operating system developed by Apple for Mac computers.Disk Management is one of the disk management components. A security vulnerability exists in the Disk Management component in Apple macOS High Sierra versions prior to 10.13.4. An attacker could exploit...

CVE-2018-4108

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Disk Management" component. It allows attackers to trigger truncation of an APFS volume password via an unspecified injection...

CVE-2018-4108

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Disk Management" component. It allows attackers to trigger truncation of an APFS volume password via an unspecified injection...

Design/Logic Flaw

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Disk Management" component. It allows attackers to trigger truncation of an APFS volume password via an unspecified injection...

CVE-2018-4108

CVE-2018-4108 describes an APFS password truncation vulnerability in the Disk Management component of macOS High Sierra prior to 10.13.4. According to Apple’s advisory, this issue could allow an injection to trigger truncation of an APFS volume password. The affected product is macOS High Sierra ...

CVE-2018-4108

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Disk Management" component. It allows attackers to trigger truncation of an APFS volume password via an unspecified injection...

macOS 10.13.x < 10.13.4 Multiple Vulnerabilities

The remote host is running a version of macOS / Mac OS X that is 10.13.x prior to 10.13.4. It is, therefore, affected by multiple vulnerabilities in the following components : - Admin Framework - APFS - ATS - CoreFoundation - CoreText - Disk Images - Disk Management - File System Events - iCloud...

CVE-2018-1062

A vulnerability was discovered in oVirt 4.1.x before 4.1.9, where the combination of Enable Discard and Wipe After Delete flags for VM disks managed by oVirt, could cause a disk to be incompletely zeroed when removed from a VM. If the same storage blocks happen to be later allocated to a new disk...

openSUSE Security Update : libvirt (openSUSE-2017-1149)

This update for libvirt fixes several issues. This security issue was fixed : - bsc1053600: Escape ssh commed line to prevent interpreting malicious hostname as arguments, allowing for command execution These non-security issues were fixed : - bsc1049505, bsc1051017: Security manager: Don't...

Unable to Back Up Disk X: Due to Invalid Partition Table

Challenge The backup job fails with the following error: Unable to back up disk X: due to invalid partition table Cause The error is caused by a volume type with no partition table and is not supported by Veeam Agent for Microsoft Windows. In Windows Disk Management, the volume looks like a commo...

Packet Capture Utility: Stenographer

Stenographer is a full-packet-capture utility for buffering packets to disk for intrusion detection and incident response purposes. It provides a high-performance implementation of NIC-to-disk packet writing, handles deleting those files as disk fills up, and provides methods for reading back...

Veeam Agent for Microsoft Windows job displays warning: Partition exceeds disk layout

Challenge A Veeam Agent for Microsoft Windows backup job displays the following warning: Partition exceeds disk layout by bytes This warning may be accompanied by the error: Error: The drive cannot find the sector requested. Asynchronous read operation failed Failed to upload disk. Agent failed t...

3ware Disk Managment 1.10 Malformed HTTP Request DoS Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6734/info A denial of service condition has been reported in 3ware's Disk Management 3DM by sending a malformed HTTP request to port 1080. Successful exploitation of this vulnerability may cause the 3DM server to crash. G...

[SECURITY] Fedora 19 Update: udisks-1.0.4-12.fc19

udisks provides a daemon, D-Bus API and command line tools for managing disks and storage devices...

[SECURITY] Fedora 20 Update: udisks-1.0.4-13.fc20

udisks provides a daemon, D-Bus API and command line tools for managing disks and storage devices...

[SECURITY] Fedora 20 Update: udisks2-2.1.2-2.fc20

udisks provides a daemon, D-Bus API and command line tools for managing disks and storage devices. This package is for the udisks 2.x series...

Udisks及Udisks2长路径名本地栈缓冲区溢出漏洞

BUGTRAQ ID: 66081 CVE ID: CVE-2014-0004 Udisks及Udisks2提供了一个守护程序、D-Bus API及命令行工具，以管理磁盘和存储设备。 udisks及udisks2处理较长的路径名时在实现上存在本地栈缓冲区溢出漏洞，攻击者可利用该漏洞插件特制的目录结构，导致以root权限执行任意代码。 0 freedesktop udisks 厂商补丁： freedesktop ----------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.freedesktop.org/wiki/Software/udi...

Insufficient Storage for VSS Error "0x8004231F or Error: VSSControl: -2147467259"

Challenge The following error occurs during a task that utilizes the Microsoft VSS subsystem: VSSControl: -2147467259 Backup job failed. Cannot create a shadow copy of the volumes containing writer's data. VSS asynchronous operation is not completed. Operation: Shadow copies commit. Code:...