Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Supported NFS protocols and how to identify which protocol is being used

Q. What are the supported version of NFS protocol ? How to identify which being used now ? A. NFSv3 is supported with XenServer 6.1,6.2,6.5 and XenServer version 7 supports NFSv3 and NFSv4.If the underlying storage array does not support NFSv4, NFSv3 will be used to mount the share. In order to...

Generated troubleshooting for NFS related issues on XenServer

This article will give you guidelines for troubleshooting NFS SR related issues on XenServer...

Mount cifs and nfs storage from CLI on xenserver

Mount cifs and nfs storage from CLI on xenserver...

VMware Instant Recovery Times Out

Challenge Instant VM recovery of a VMware VM fails after at least 30 minutes with the error: Failed to publish VM Cause Veeam Backup & Replication implements timeouts for most operations to protect against hangs. However, even when no process is hung, timeouts may occur due to significant...

Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-3070-1)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3070-1 advisory. A missing permission check when settings ACLs was discovered in nfsd. A local user could exploit this flaw to gain access to any file by setting an ACL...

USN-3070-1 linux vulnerabilities

A missing permission check when settings ACLs was discovered in nfsd. A local user could exploit this flaw to gain access to any file by setting an ACL. CVE-2016-1237 Kangjie Lu discovered an information leak in the Reliable Datagram Sockets RDS implementation in the Linux kernel. A local attacke...

SUSE SLES11 Security Update : kernel (SUSE-SU-2016:1672-1)

The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. Notable changes in this kernel : - It is now possible to mount a NFS export on the exporting host directly. The following security bugs were fixed : - CVE-2016-5244: A kernel information leak in...

FreeBSD : FreeBSD -- Deadlock in the NFS server (6a384960-6007-11e6-a6c3-14dae9d210b8)

The kernel holds a lock over the source directory vnode while trying to convert the target directory file handle to a vnode, which needs to be returned with the lock held, too. This order may be in violation of normal lock order, which in conjunction with other threads that grab locks in the righ...

FreeBSD : FreeBSD -- Incorrect privilege validation in the NFS server (e5d2442d-5e76-11e6-a6c3-14dae9d210b8)

Problem Description : The kernel incorrectly uses client supplied credentials instead of the one configured in exports5 when filling out the anonymous credential for a NFS export, when -network or -host restrictions are used at the same time. Impact : The remote client may supply privileged...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20160712)

Security Fix : - A flaw was found in the way certain interfaces of the Linux kernel's Infiniband subsystem used write as bi-directional ioctl replacement, which could lead to insufficient memory security checks when being invoked using the the splice system call. A local unprivileged user on a...

CentOS Update for kernel CESA-2016:1406 centos6

Check the version of kernel SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882518";...

kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2016:1406 Updated kernel packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS ba...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, ar...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the nfs-common package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

CVE-2016-1237

nfsd in the Linux kernel through 4.6.3 allows local users to bypass intended file-permission restrictions by setting a POSIX ACL, related to nfs2acl.c, nfs3acl.c, and nfs4acl.c...

CVE-2016-1237

It was found that nfsd is missing permissions check when setting ACL on files, this may allow a local users to gain access to any file by setting a crafted ACL...

Linux kernel nfsd Privilege Acquisition Vulnerability

Linux kernel is the kernel used by Linux, the operating system released by the Linux Foundation in the United States. nfsd is a daemon in the NFS Network File System server. A security vulnerability exists in the Linux kernel's nfsd. An attacker can exploit this vulnerability to set access contro...

Debian Security Advisory DSA 3607-1 (linux - security update)

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. CVE-2015-7515, CVE-2016-2184, CVE-2016-2185, CVE-2016-2186, CVE-2016-2187, CVE-2016-3136, CVE-2016-3137, CVE-2016-3138, CVE-2016-3140 Ralf Spenneberg o...

CVE-2016-0911

EMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 has a default norootsquash option for NFS exports, which makes it easier for remote attackers to obtain filesystem access by leveraging client root privileges...