AIX 6.1 TL 9 : lvm (IV67907)

The running of lquerylv command with variable DBGCMDLQUERYLV set may allow a local user to gain root privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory lvmadvisory.asc. include'deprecatednasllevel.inc';...

AIX 5.3 TL 12 : lvm (IV68070)

The running of lquerylv command with variable DBGCMDLQUERYLV set may allow a local user to gain root privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory lvmadvisory.asc. include'deprecatednasllevel.inc';...

AIX 6.1 TL 8 : lvm (IV68082)

The running of lquerylv command with variable DBGCMDLQUERYLV set may allow a local user to gain root privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory lvmadvisory.asc. include'deprecatednasllevel.inc';...

AIX 7.1 TL 2 : lvm (IV68478)

The running of lquerylv command with variable DBGCMDLQUERYLV set may allow a local user to gain root privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory lvmadvisory.asc. include'deprecatednasllevel.inc';...

AIX 7.1 TL 3 : lvm (IV67908)

The running of lquerylv command with variable DBGCMDLQUERYLV set may allow a local user to gain root privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory lvmadvisory.asc. include'deprecatednasllevel.inc';...

PYSEC-2013-35

The clearvolume function in LVMVolumeDriver driver in OpenStack Cinder 2013.1.1 through 2013.1.2 does not properly clear data when deleting a snapshot, which allows local users to obtain sensitive information via unspecified vectors...

Moderate: Red Hat Security Advisory: openstack-cinder security update

Updated openstack-cinder packages that fix two security issues are now available for Red Hat OpenStack 3.0. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

OpenStack: Cinder LVM volume driver does not support secure deletion

The clearvolume function in LVMVolumeDriver driver in OpenStack Cinder 2013.1.1 through 2013.1.2 does not properly clear data when deleting a snapshot, which allows local users to obtain sensitive information via unspecified vectors...

OpenStack Cinder 信息泄漏漏洞(CVE-2013-4183)

Bugtraq ID:61689 CVE ID:CVE-2013-4183 OpenStack Cinder是为Openstack提供块存储的功能 OpenStack Cinder LVM卷驱动存在一个安全漏洞，当配置了安全删除secure delete时LVM快照内容可能没有正确删除清除，可导致这些数据泄漏给之后租此服务器的租户 0 OpenStack Cinder 厂商解决方案 用户可参考如下厂商提供的安全补丁以修复该漏洞： Havana development branch fix: https://review.openstack.org/36506 Grizzly fix:...

Moderate: Red Hat Security Advisory: rhev 3.2.2 - vdsm security and bug fix update

Updated vdsm packages that fix one security issue and various bugs are now available. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from the C...

SuSE 11.3 Security Update : Xen (SAT Patch Number 8063)

The Xen hypervisor and toolset has been updated to 4.2.206 to fix various bugs and security issues : The following security issues have been addressed : - Various integer overflows in the ELF loader were fixed. XSA-55. CVE-2013-2194 - Various pointer dereferences issues in the ELF loader were...

Oracle Linux 6 : libvirt (ELSA-2011-1197)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-1197 advisory. 0.8.7-18.0.1.el61.1 - Replace docs/et.png in tarball with blank image libvirt-0.8.7-18.el61.1 - debug: Avoid null dereference on uuid lookup api rhbz728546 - Fi...

[SECURITY] Fedora 19 Update: schroot-1.4.25-13.fc19

schroot allows users to execute commands or interactive shells in different chroots. Any number of named chroots may be created, and access permissions given to each, including root access for normal users, on a per-user or per-group basis. Additionally, schroot can switch to a different user in...

Fedora 18 : libvirt-0.10.2.5-1.fc18 (2013-8681)

Rebased to version 0.10.2.5 - Fix creating snapshot on lvm pool bz 955371 - Properly escape audit paths bz 922186 - Follow updated packaging guidelines for user alloc bz 924501 - CVE-2013-1962 Open files DoS bz 963789, bz 953107 Note that Tenable Network Security has extracted the preceding...

AIX 5.3 TL 5 / 5.3 TL 6 : bos.rte.lvm (U809463)

The remote host is missing AIX PTF U809463, which is related to the security of the package bos.rte.lvm. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U809463. The text itself is copyright C...

Important: Red Hat Security Advisory: openstack-nova security and bug fix update

Updated openstack-nova packages that fix two security issues and multiple bugs are now available for Red Hat OpenStack Folsom. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

CVE-2012-5625

OpenStack Compute Nova Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume PV content when reallocating for instances, which allows attackers to obtain sensitive information by reading the memory of the previous logical volume L...

Design/Logic Flaw

OpenStack Compute Nova Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume PV content when reallocating for instances, which allows attackers to obtain sensitive information by reading the memory of the previous logical volume L...

PYSEC-2012-41

OpenStack Compute Nova Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume PV content when reallocating for instances, which allows attackers to obtain sensitive information by reading the memory of the previous logical volume L...

CVE-2012-5625

OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when libvirt with LVM-backed ephemeral storage is used, did not wipe PV content before reallocation to a new instance. This allowed reading memory from the previous LV and potential exposure of sensitive data. Remediation is to upgrade ...