kernel: scsi: qla2xxx: Fix warning message due to adisc being flushed

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix warning message due to adisc being flushed Fix warning message due to adisc being flushed. Linux kernel triggered a warning message where a different error code type is not matching up with the expected type. A...

PT-2022-11542 · Lenovo · Thinkstation +2

Name of the Vulnerable Software and Affected Versions: Lenovo Desktop, ThinkStation, and ThinkEdge models affected versions not specified Description: A potential issue in the SMI callback function used in the NVME driver may allow an attacker with local access and elevated privileges to execute...

Veeam Agent for Microsoft Windows 5.0 Can’t Be Started or Installed After Upgrade to Windows 11

Challenge After upgrading to Windows 11, the Veeam Agent for Microsoft Windows service may fail to start. The following errors can be found in C:\ProgramData\Veeam\Endpoint\Svc.VeeamEndpointBackup.log: Error Failed to start service. Error Error occurred during LocalDB instance startup: SQL Server...

kernel: iscsi: unrestricted access to sessions and handles

A flaw was found in the way access to sessions and handles was handled in the iSCSI driver in the Linux kernel. A local user could use this flaw to leak iSCSI transport handle kernel address or end arbitrary iSCSI connections on the system...

PT-2024-11074 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, specifically in the scsi: qla2xxx driver. The issue arises from the commit a6dcfe08487e, which limits interrupt vectors to the...

CVE-2021-29641

Directus 8 before 8.8.2 allows remote authenticated users to execute arbitrary code because file-upload permissions include the ability to upload a .php file to the main upload directory and/or upload a .php file and a .htaccess file to a subdirectory. Exploitation succeeds only for certain...

CVE-2021-29641

Directus 8 before 8.8.2 allows remote authenticated users to execute arbitrary code because file-upload permissions include the ability to upload a .php file to the main upload directory and/or upload a .php file and a .htaccess file to a subdirectory. Exploitation succeeds only for certain...

Design/Logic Flaw

Directus 8 before 8.8.2 allows remote authenticated users to execute arbitrary code because file-upload permissions include the ability to upload a .php file to the main upload directory and/or upload a .php file and a .htaccess file to a subdirectory. Exploitation succeeds only for certain...

CVE-2021-29641

Directus 8 before 8.8.2 allows remote authenticated users to execute arbitrary code because file-upload permissions include the ability to upload a .php file to the main upload directory and/or upload a .php file and a .htaccess file to a subdirectory. Exploitation succeeds only for certain...

The vulnerability of Linux operating system SCSI kernel drivers, related to the improper assignment of permissions to critical resources, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Linux operating system’s SCSI kernel driver is related to an error in privilege escalation within the driver. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

PT-2020-4334 · Microsoft · Windows Storage Vsp Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Storage VSP Driver affected versions not specified Description: An elevation of privilege issue exists due to the improper handling of file operations by the Windows Storage VSP Driver. To exploit this, an attacker would first need co...

CVE-2020-10755

An insecure-credentials flaw was found in all openstack-cinder versions before openstack-cinder 14.1.0, all openstack-cinder 15.x.x versions before openstack-cinder 15.2.0 and all openstack-cinder 16.x.x versions before openstack-cinder 16.1.0. When using openstack-cinder with the Dell EMC ScaleI...

kernel: An out-of-bounds read in drivers/scsi/qedi/qedi_dbg.c leading to crash or information disclosure

An out-of-bounds OOB memory access flaw was found in the Qlogic ISCSI module in the Linux kernel's qedidbg family of functions in drivers/scsi/qedi/qedidbg.c. Here a local attacker with a special user privilege account or a root can cause an out-of-bound memory access leading to a system crash or...

Google Android Storage Driver Information Disclosure Vulnerability (CNVD-2019-34477)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. Storage driver is one of the storage drivers. An information disclosure vulnerability exists in the Storage driver in Android, which arises from errors in the configuration of a network...

Google Android Storage Driver Information Disclosure Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. Storage driver is one of the storage drivers. An information disclosure vulnerability exists in the Storage driver in Android. The vulnerability stems from errors such as configuration...

Google Android Storage Driver Information Disclosure Vulnerability (NVD-C-2019-128181)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. Storage driver is one of the storage drivers. An information disclosure vulnerability exists in the Storage driver in Android, which arises from errors in the configuration of a network...

Google Android Storage Driver Input Validation Error Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. Storage driver is one of the storage drivers. An input validation error vulnerability exists in the Storage driver in Android, which can be exploited by an attacker to disclose...

Security update for docker, docker-runc, containerd, golang-github-docker-libnetwork (important)

This update for docker, docker-runc, containerd, golang-github-docker-libnetwork fixes several issues. These security issues were fixed: - CVE-2017-16539: The DefaultLinuxSpec function in oci/defaults.go docker did not block /proc/scsi pathnames, which allowed attackers to trigger data loss when...

openSUSE Security Update : docker / docker-runc / containerd / etc (openSUSE-2018-152)

This update for docker, docker-runc, containerd, golang-github-docker-libnetwork fixes several issues. These security issues were fixed : - CVE-2017-16539: The DefaultLinuxSpec function in oci/defaults.go docker did not block /proc/scsi pathnames, which allowed attackers to trigger data loss when...

The vulnerability of the Linux operating system’s kernel driver allows a hacker to cause a service failure or exert other effects.

The vulnerability of the Linux operating system’s kernel driver uas arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure or other effects, using a specially crafted USB device that utilizes the...