XenServer and Citrix Hypervisor Security Update for CVE-2024-45818

Description of Problem An issue has been identified that affects both XenServer 8 and Citrix Hypervisor 8.2 CU1 LTSR and allows a malicious administrator of a guest VM to cause the host to crash or become unresponsive. This issue has the following identifier: CVE-2024-45818 What Customers Should ...

SAS CTF and the many ways to persist a kernel shellcode on Windows 7

On May 18, 2024, Kaspersky's Global Research & Analysis Team GReAT, with the help of its partners, held the qualifying stage of the SAS CTF, an international competition of cybersecurity experts held as part of the Security Analyst Summit conference. More than 800 teams from all over the world to...

October 8, 2024—KB5044356 (Monthly Rollup)

None None...

Cisco Nexus Dashboard 安全漏洞

Cisco Nexus Dashboard is a single console from Cisco, Inc. It can simplify the operation and management of data center networks. A security vulnerability exists in Cisco Nexus Dashboard that originates when remote controller credentials are recorded in internal logs stored in technical support...

XenServer and Citrix Hypervisor Security Update for CVE-2024-45817

XenServer and Citrix Hypervisor Security Update Description of Problem An issue has been identified that affects both XenServer 8 and Citrix Hypervisor 8.2 CU1 LTSR and allow a malicious administrator of a guest VM to cause the host to crash or become unresponsive. This issue has the following...

CVE-2024-24972

The CVE-2024-24972 issue affects Gallagher Controller 6000 and Controller 7000 via a Buffer Copy without Checking Size of Input in the diagnostic web interface, enabling an authorized and authenticated operator to reboot the controller and cause a Denial of Service. Affected firmware histories in...

ALPINE-CVE-2024-7347

NGINX Open Source and NGINX Plus have a vulnerability in the ngxhttpmp4module, which might allow an attacker to over-read NGINX worker memory resulting in its termination, using a specially crafted mp4 file. The issue only affects NGINX if it is built with the ngxhttpmp4module and the mp4 directi...

CVE-2024-7347

NGINX Open Source and NGINX Plus have a vulnerability in the ngxhttpmp4module, which might allow an attacker to over-read NGINX worker memory resulting in its termination, using a specially crafted mp4 file. The issue only affects NGINX if it is built with the ngxhttpmp4module and the mp4 directi...

CVE-2024-39809

The Central Manager user session refresh token does not expire when a user logs out. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2024-7347

NGINX Open Source and NGINX Plus have a vulnerability in the ngxhttpmp4module, which might allow an attacker to over-read NGINX worker memory resulting in its termination, using a specially crafted mp4 file. The issue only affects NGINX if it is built with the ngxhttpmp4module and the mp4 directi...

CVE-2024-41719

CVE-2024-41719 affects BIG-IP Next Central Manager. When generating a QKView file of a BIG-IP Next instance from Central Manager, F5 iHealth credentials are logged in the BIG-IP Central Manager logs. The vulnerability is scoped to BIG-IP Next Central Manager (20.1.0–20.2.0 are listed as vulnerabl...

CVE-2024-41723 BIG-IP iControl REST vulnerability

Undisclosed requests to BIG-IP iControl REST can lead to information leak of user account names. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

PT-2024-29535 · F5 · F5 Big-Ip Next

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP Next affected versions not specified Description: When generating a QKView of a BIG-IP Next instance from the BIG-IP Next Central Manager, F5 iHealth credentials will be logged in the BIG-IP Central Manager logs. Note that software...

テクニカル サポートの対応範囲および Q＆A

この文書では、テクニカルサポートの対応範囲および頻繁に寄せられる質問について記載しています。...

How to Capture a Network Trace for a PVS Target Device

This article describes how to capture a target-side network trace from a Provisioned Services PVS machine. Requirements Hypervisors: XenServer 5.x XenServer 6.x VMware ESX 4.x VMware ESXi 5.x Hyper-V 2012 Or Physical Environment including but not limited to HP/IBM/Dell/Cisco target devices...

Worldwide Support Services Delivery Guide - 2024

Worldwide Support Services Delivery Guide -2024 Information To our Citrix customers and partners, we want to thank you for choosing our products and services. Our goal is to ensure your success, and we have created thisWorldwide Support Services Delivery Guide to help you achieve just that. The...

Citrix uberAgent Security Bulletin for CVE-2024-6677

Description of Problem A vulnerability has been discovered in Citrix uberAgent, which, if exploited, may result in the escalation of privileges of the attacker. Affected Versions: The following supported versions of Citrix uberAgent are affected by the vulnerability: Citrix uberAgent before 7.2.1...

CVE-2024-22387

External Control of Critical State Data CWE-642 in the Controller 6000 and Controller 7000 diagnostic web interface allows an authenticated user to modify device I/O connections leading to unexpected behavior that in some circumstances could compromise site physical security controls. Gallagher...

NetScaler Console, Agent and SDX (SVM) Security Bulletin for CVE-2024-6235 and CVE-2024-6236

Description of Problem Two vulnerabilities have been discovered in NetScaler Console formerly NetScaler ADM, NetScaler SDX SVM, and NetScaler Agent. Refer to below for further details: Affected Versions The following supported version of NetScaler Console formerly NetScaler ADM is affected by...

Cloud Software Group Security Advisory for CVE-2024-6387

Advisory for 3rd party CVE-2024-6387 Cloud Software Group is aware of the vulnerability CVE-2024-6387 impacting OpenSSH. Qualys has discovered a remote unauthenticated code execution vulnerability in OpenSSH’s server sshd in glibc-based Linux systems. Because this vulnerability is a regression of...