Code injection

Red Hat Enterprise Virtualization RHEV Manager before 3.5.1 ignores the permission to deny snapshot creation during live storage migration between domains, which allows remote authenticated users to cause a denial of service prevent host start by creating a long snapshot chain...

CVE-2015-0237

Red Hat Enterprise Virtualization RHEV Manager before 3.5.1 ignores the permission to deny snapshot creation during live storage migration between domains, which allows remote authenticated users to cause a denial of service prevent host start by creating a long snapshot chain...

vdsm: Users attempting a live storage migration create snapshot without snapshot creation permissions

It was discovered that the permissions to allow or deny snapshot creation were ignored during live storage migration of a VM's disk between storage domains. An attacker able to live migrate a disk between storage domains could use this flaw to cause a denial of service...

Moderate: Red Hat Security Advisory: Red Hat Enterprise Virtualization Manager 3.5.1 update

Red Hat Enterprise Virtualization Manager 3.5.1 is now available. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links ...

How to Perform a Manual Failback (Reverse Replication)

Article Applicability This article is relevant only to non-CDP snapshot-based replicas. Reverse replication cannot be used to fail back a CDP replica. To fail back a CDP replica, use the built-in failback workflow described in Failover and Failback for CDP. Purpose This article describes how to...

libvirt: missing ACL check for the VIR_DOMAIN_XML_SECURE flag in save images and snapshots objects

It was discovered that the virDomainSnapshotGetXMLDesc and virDomainSaveImageGetXMLDesc functions did not sufficiently limit the usage of the VIRDOMAINXMLSECURE flag when fine-grained ACLs were enabled. A remote attacker able to establish a connection to libvirtd could use this flaw to obtain...

Windows 2012/2012R2 leaks memory when a hardware snapshot is created multiple times on a CSV

Challenge Windows 2012 / 2012 R2 Hyper-V hosts leak memory when a hardware snapshot is created/removed multiple times on a CSV with a hardware provider. Cause Windows 2012 / 2012 R2 Hyper-V hosts leak memory when a snapshot is created on a CSV using hardware provider. Due to the fact that only a...

CVE-2015-0236

libvirt before 1.2.12 allow remote authenticated users to obtain the VNC password by using the VIRDOMAINXMLSECURE flag with a crafted 1 snapshot to the virDomainSnapshotGetXMLDesc interface or 2 image to the virDomainSaveImageGetXMLDesc interface...

DEBIAN-CVE-2015-0236

libvirt before 1.2.12 allow remote authenticated users to obtain the VNC password by using the VIRDOMAINXMLSECURE flag with a crafted 1 snapshot to the virDomainSnapshotGetXMLDesc interface or 2 image to the virDomainSaveImageGetXMLDesc interface...

Input validation

libvirt before 1.2.12 allow remote authenticated users to obtain the VNC password by using the VIRDOMAINXMLSECURE flag with a crafted 1 snapshot to the virDomainSnapshotGetXMLDesc interface or 2 image to the virDomainSaveImageGetXMLDesc interface...

Holes in Progressive Dongle Could Lead to Car Hacks

A device that a popular car insurance company sends to customers to keep track of their driving and reduce their rate may be insecure and could be used to take control of a user’s vehicles. Progressive manufactures the device, a dongle called Snapshot that plugs into the OBD-II diagnostic port on...

Linux-Kernel-2.6.34-rc3

The kernel allows processes to access the internal .reiserfspriv directory at the top of a reiserfs filesystem which is used to store xattrs. Permissions are not enforced in that tree, so unprivileged users can view and potentially modify the xattrs on arbitrary files. import os, sys SHELL = 'int...

SAN snapshots on HP Store Virtual P4500 left behind after backup failures

Challenge The Veeam backup job fails but the SAN snapshot on HP Store Virtual is still created and left behind. On the proxy you may see in the event logs 2 events, one after another: first VSS event 8229 about VSS writer failure and then event 284 from HP StoreVirtual VSS Provider about successf...

RHEL 6 : rhevm (RHSA-2014:1002)

Updated rhevm packages that fix one security issue are now available. The Red Hat Security Response Team has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from the CVE link in the...

Veeam doesn't clean up temporary datastore in vSphere after restore from NetApp storage snapshot

Challenge After completing one of the restore options available for NetApp storage snapshot, you may notice that the temporary datastore under the name "snap--" is still mounted on the ESXi hosts with inactive status. See the screenshot below for an example: After a manual rescan of the storage...

Fedora 21 : qemu-2.1.2-2.fc21 (2014-11588)

Rebased to version 2.1.2 - CVE-2014-3640 qemu: slirp: NULL pointer bz 1144821, bz 1144818 - Add Requires seabios = 1.7.5, otherwise Windows virtio booting does not work. - Add Requires seabios = 1.7.5, otherwise Windows virtio booting does not work. - Fix crash on migration/snapshot bz 1144490...

Entire VM restore fails with 'An error occurred while taking a snapshot: Error.'

Challenge Entire VM Restore fails with: An error occurred while taking a snapshot: Error. Cause This can occur when a workingDir entry in the VMX causes the VM to attempt to direct snapshots to a different datastore that is not present in the site where the restore is taking place. Solution To...

WordPress Snapshot Theme - Remote Code Execution

There are a bug in this theme, that allows any website visitor to run and see the output of any shortcode. This gives unauthenticated visitors the same power to execute code on the server as regular publishers have. Solution Update the theme...

ppc64-diag: fix for tmp races and information disclosure (important)

ppc64-diag was updated to fix tmp race issues CVE-2014-4038 and a file disclosure problem in snapshot tarball generation CVE-2014-4039...

CVE-2014-2356

Innominate mGuard before 7.6.4 and 8.x before 8.0.3 does not require authentication for snapshot downloads, which allows remote attackers to obtain sensitive information via a crafted HTTPS request...