Virtuozzo Hybrid Infrastructure 5.0 Update 1.2 (5.0.1-55)

This update provides stability and performance fixes. Vulnerability id: VSTOR-51857, VSTOR-52213 Stability fixes for object storage. Vulnerability id: VSTOR-52492 A performance fix for iSCSI...

Virtuozzo Hybrid Server 7.5 Update 3 Hotfix 1 (7.5.3-396)

The Hotfix 1 for Virtuozzo Hybrid Server 7.5 Update 3 provides stability and usability bug fixes Vulnerability id: PSBM-139281 Optimized cache and memory usage while creating backups. Vulnerability id: PSBM-139170 The container backup process could hang when working with NFS backup storage...

CVE-2022-22253

The DFX module has a vulnerability of improper validation of integrity check values.Successful exploitation of this vulnerability may affect system stability...

CVE-2022-22253

The DFX module has a vulnerability of improper validation of integrity check values.Successful exploitation of this vulnerability may affect system stability...

CVE-2022-22253

The DFX module has a vulnerability of improper validation of integrity check values.Successful exploitation of this vulnerability may affect system stability...

Input validation

The DFX module has a vulnerability of improper validation of integrity check values.Successful exploitation of this vulnerability may affect system stability...

PT-2022-15301

Name of the Vulnerable Software and Affected Versions DFX module affected versions not specified Description The issue is related to improper validation of integrity check values in the DFX module. Successful exploitation may impact system stability. Recommendations At the moment, there is no...

CVE-2022-22253: Improper Validation of Integrity Check Value

The DFX module has a vulnerability of improper validation of integrity check values.Successful exploitation of this vulnerability may affect system stability...

Huawei HarmonyOS DFX module post-release reuse vulnerability

Huawei HarmonyOS is an operating system from Huawei China. A post-release reuse vulnerability exists in the Huawei HarmonyOS DFX module, which provides a microkernel-based, full-scenario distributed operating system. The vulnerability stems from a confusion in the DFX module's instructions for...

Huawei HarmonyOS DFX module input validation error vulnerability

Huawei HarmonyOS is an operating system from Huawei China. A vulnerability exists in the Huawei HarmonyOS DFX module due to an input validation error. The vulnerability stems from the presence of improper validation of integrity check values in the DFX module. An attacker could exploit this...

NonCustodialPSM can become insolvent as CPI index rises

Lines of code Vulnerability details Impact NonCustodialPSM mints and redeems VOLT to a chosen stablecoin at the current market rate minus a fixed fee. It is assumed that the difference to be covered with pcvDeposit funds. That assumption is similar to one used in FEI protocol, but there no rate...

VMware Workspace ONE Access CVE-2022-22954

This module exploits CVE-2022-22954, an unauthenticated server-side template injection SSTI in VMware Workspace ONE Access, to execute shell commands as the "horizon" user. Module Options msf use exploit/linux/http/vmware/workspaceoneaccesscve202222954 msf undefinedworkspaceoneaccesscve202222954...

HUAWEI HarmonyOS 资源管理错误漏洞

Huawei HarmonyOS is an operating system from Huawei China. A post-release reuse vulnerability exists in the Huawei HarmonyOS DFX module, which provides a microkernel-based, full-scenario distributed operating system. The vulnerability stems from a confusion in the DFX module's instructions for...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. A vulnerability exists in the Huawei HarmonyOS DFX module due to an input validation error. The vulnerability stems from the presence of improper validation of integrity check values in the DFX module. An attacker could exploit this...

ALLMediaServer 1.6 SEH Buffer Overflow

This module exploits a stack buffer overflow leading to a SEH handler overwrite in ALLMediaServer 1.6. The vulnerability is caused due to a boundary error within the handling of a HTTP request. Note that this exploit will only work against x86 or WoW64 targets, x64 is not supported at this time...

CVE-2021-3714

A flaw was found in the Linux kernels memory deduplication mechanism. Previous work has shown that memory deduplication can be attacked via a local exploitation mechanism. The same technique can be used if an attacker can upload page sized files and detect the change in access time from a network...

Virtuozzo Hybrid Infrastructure 5.0 Update 1.1 (5.0.1-53)

This update provides security and stability fixes. Vulnerability id: VSTOR-51927 A security fix for CVE-2022-0378. Vulnerability id: VSTOR-51506 Fixed a connectivity issue when an Open vSwitch bridge is recreated for VLAN physical networks. Vulnerability id: VSTOR-51357 Entering maintenance may g...

Virtuozzo Hybrid Infrastructure 5.4 Update 1 (5.4.1-59)

This update provides new features, as well as stability fixes for the compute and core storage services. Vulnerability id: VSTOR-62742 A VM creation fails with the error 'Unable to update the attachment.' Vulnerability id: VSTOR-65824 Some charts in the admin panel or Grafana dashboard may be...

CVE-2021-3933

An integer overflow could occur when OpenEXR processes a crafted file on systems where sizet 64 bits. This could cause an invalid bytesPerLine and maxBytesPerLine value, which could lead to problems with application stability or lead to other attack paths...

CVE-2021-3933

An integer overflow could occur when OpenEXR processes a crafted file on systems where sizet 64 bits. This could cause an invalid bytesPerLine and maxBytesPerLine value, which could lead to problems with application stability or lead to other attack paths...