Security Bulletin: IBM Network Performance Insight 1.3.1 was affected by multiple vulnerabilities in jackson-databind

Summary IBM Network Performance Insight 1.3.1 was affected by multiple vulnerabilities in jackson-databind Vulnerability Details CVEID: CVE-2020-36185 DESCRIPTION: FasterXML jackson-databind could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization...

kernel: performance counters race condition use-after-free

A flaw was found in the Linux kernel. A use-after-free memory flaw was found in the perf subsystem allowing a local attacker with permission to monitor perf events to corrupt memory and possibly escalate privileges. The highest threat from this vulnerability is to data confidentiality and integri...

Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 7.3 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

A Tip For Easy SQL-based Big Data Analysis: Use a Temporary Dataset

Every once in a while we’re required to analyze big data on a wide time range. Here’s a common example: “Can you analyze what happened during 2020? And don’t forget to compare it to 2019”. Questions like this are hard to answer in the big data world: Queries may take a long time to process - and...

Microsoft Edge (Chromium-Based) Multiple Vulnerabilities (Mar 2021)

This host is missing an important security update according to Microsoft Edge Chromium-Based updates. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2021-28361

An issue was discovered in Storage Performance Development Kit SPDK before 20.01.01. If a PDU is sent to the iSCSI target with a zero length but data is expected, the iSCSI target can crash with a NULL pointer dereference...

AZL-38836 CVE-2021-28361 affecting package ceph for versions less than 18.2.2-1

An issue was discovered in Storage Performance Development Kit SPDK before 20.01.01. If a PDU is sent to the iSCSI target with a zero length but data is expected, the iSCSI target can crash with a NULL pointer dereference...

CVE-2021-28361

An issue was discovered in Storage Performance Development Kit SPDK before 20.01.01. If a PDU is sent to the iSCSI target with a zero length but data is expected, the iSCSI target can crash with a NULL pointer dereference...

CVE-2021-28361

CVE-2021-28361 affects Storage Performance Development Kit (SPDK) before 20.01.01. If a PDU is sent to the iSCSI target with zero length (but data is expected), the iSCSI target can crash due to a NULL pointer dereference, impacting availability (CVSS v3.1: High). The issue is tied to SPDK’s iSCS...

CVE-2021-28361

An issue was discovered in Storage Performance Development Kit SPDK before 20.01.01. If a PDU is sent to the iSCSI target with a zero length but data is expected, the iSCSI target can crash with a NULL pointer dereference...

CVE-2021-28361: NULL Pointer Dereference

An issue was discovered in Storage Performance Development Kit SPDK before 20.01.01. If a PDU is sent to the iSCSI target with a zero length but data is expected, the iSCSI target can crash with a NULL pointer dereference...

Storage Performance Development Kit code-related vulnerabilities

Storage Performance Development Kit SPDK is a storage performance development kit from the SPDK community. The product is primarily used for writing high-performance, scalable user-mode storage applications. A security vulnerability exists in Storage Performance Development Kit before 20.01.01,...

PT-2021-17848

Name of the Vulnerable Software and Affected Versions: Storage Performance Development Kit SPDK versions prior to 20.01.01 Description: An issue was discovered in the Storage Performance Development Kit SPDK. If a PDU is sent to the iSCSI target with a zero length but data is expected, the iSCSI...

Fedora 32 : suricata (2021-6c7cfe2532)

The remote Fedora 32 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-6c7cfe2532 advisory. - Various performance, accuracy and stability issues have been fixed. FEDORA-2021-6c7cfe2532 Note that Nessus has not tested for this issue but has instead...

Fedora 33 : suricata (2021-9747ed7427)

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-9747ed7427 advisory. - Various performance, accuracy and stability issues have been fixed. FEDORA-2021-9747ed7427 Note that Nessus has not tested for this issue but has instead...

Unbreakable Enterprise kernel security update

4.14.35-2047.501.1.el7uek - ovl: restore creds in all return paths of ovliterate Somasundaram Krishnasamy Orabug: 32620381 4.14.35-2047.501.0 - block/diskstats: accumulate all per-cpu counters in one pass Konstantin Khlebnikov Orabug: 32531559 - uek-rpm: config-aarch-embedded2 update for Jan 2021...

Serverless Storage at the Edge (EdgeKV Beta)

We are pleased to announce the launch of EdgeKV, our distributed key-value store, into beta! EdgeKV is enabling technology for EdgeWorkers, our serverless computing platform that enables developers to create services using JavaScript and deploy them across our platform. When writing JavaScript,...

Mail.ru: Information Disclosure of Garbage Collection Cycle 'Again'

Performance metrics were available at youla.ru...

Security Bulletin: IBM Network Performance Insight 1.3.1 was affected by vulnerability in jackson-databind (CVE-2020-25649)

Summary IBM Network Performance Insight 1.3.1 was affected by CVE-2020-25649 becuase using older jackson-databind Vulnerability Details CVEID: CVE-2020-25649 DESCRIPTION: FasterXML Jackson Databind could provide weaker than expected security, caused by not having entity expansion secured properly...

Unspecified Vulnerability in IBM APM

IBM Application Performance Management APM is a suite of IT service management software from IBM in the United States. The software is primarily used to monitor and manage cloud, on-premise and hybrid applications, and IT infrastructure. A security vulnerability exists in IBM APM version 8.1.4,...