Backup proxy that uses Virtual Appliance (HotAdd) mode and is installed on Microsoft Windows 2019 shows "Restart Required" message

Challenge When you log in to the Veeam backup proxy server interactively following the execution of a job using the hot add transport mode, you may get a notification from the OS prompting to restart the server. The notification can be one of the following: Your PC needs to be restarted to finish...

The vulnerabilities of the functions smp_task_timedout() and smp_task_done() in the Linux kernel’s drivers/scsi/libsas/sas_expander.c file allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of the functions smptasktimedout and smptaskdone in the Linux kernel’s drivers/scsi/libsas/sasexpander.c file are related to synchronization errors when using shared resources. Exploiting these vulnerabilities can allow an attacker to compromise the confidentiality, integrity,...

CVE-2007-6763

SAS Drug Development SDD before 32DRG02 mishandles logout actions, which allows a user who was previously logged in to access resources by pressing a back or forward button in a web browser...

CVE-2007-6763

SAS Drug Development SDD before 32DRG02 mishandles logout actions, which allows a user who was previously logged in to access resources by pressing a back or forward button in a web browser...

CVE-2007-6763

CVE-2007-6763 concerns SAS Drug Development (SDD) prior to 32DRG02, which mishandles logout actions. According to the sources, a user who was previously authenticated can regain access to resources by using the browser’s back or forward buttons after logout. The vulnerability is described consist...

Ubuntu: Security Advisory (USN-4076-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-4076-1: Linux kernel vulnerabilities

It was discovered that a race condition existed in the Serial Attached SCSI SAS implementation in the Linux kernel. A local attacker could possibly use this to cause a denial of service system crash or execute arbitrary code. CVE-2018-20836 It was discovered that the ext4 file system implementati...

USN-4076-1 linux, linux-aws, linux-kvm, linux-raspi2 vulnerabilities

It was discovered that a race condition existed in the Serial Attached SCSI SAS implementation in the Linux kernel. A local attacker could possibly use this to cause a denial of service system crash or execute arbitrary code. CVE-2018-20836 It was discovered that the ext4 file system implementati...

Denial Of Service (DoS)

Linux kernel is vulnerable to denial of serviceDoS attacks. This is because the Serial Attached SCSI SAS implementation mishandles a mutex within libsas. This allows local users to cause a denial of service deadlock by triggering certain error-handling code...

CVE-2019-11810

An issue was discovered in the Linux kernel before 5.0.7. A NULL pointer dereference can occur when megasascreateframepool fails in megasasalloccmds in drivers/scsi/megaraid/megaraidsasbase.c. This causes a Denial of Service, related to a use-after-free...

DEBIAN-CVE-2018-20836

An issue was discovered in the Linux kernel before 4.20. There is a race condition in smptasktimedout and smptaskdone in drivers/scsi/libsas/sasexpander.c, leading to a use-after-free...

UBUNTU-CVE-2018-20836

An issue was discovered in the Linux kernel before 4.20. There is a race condition in smptasktimedout and smptaskdone in drivers/scsi/libsas/sasexpander.c, leading to a use-after-free...

CVE-2018-20732

SAS Web Infrastructure Platform before 9.4M6 allows remote attackers to execute arbitrary code via a Java deserialization variant...

CVE-2018-20733

BI Web Services in SAS Web Infrastructure Platform before 9.4M6 allows XXE...

Deserialization of untrusted data

SAS Web Infrastructure Platform before 9.4M6 allows remote attackers to execute arbitrary code via a Java deserialization variant...

CVE-2018-20732

SAS Web Infrastructure Platform before 9.4M6 allows remote attackers to execute arbitrary code via a Java deserialization variant...

Cross site scripting

Logon Manager in SAS Web Infrastructure Platform before 9.4M3 allows reflected XSS on the Timeout page...

CVE-2018-20733

BI Web Services in SAS Web Infrastructure Platform before 9.4M6 allows XXE...

Design/Logic Flaw

BI Web Services in SAS Web Infrastructure Platform before 9.4M6 allows XXE...

CVE-2018-20732

CVE-2018-20732 affects SAS Web Infrastructure Platform prior to 9.4M6, where a Java deserialization variant allows remote code execution. The vulnerability impacts the platform’s deserialization handling, enabling arbitrary code execution by an authenticated or unauthenticated attacker over the n...