1920 matches found
Malware vaccination tricks: blue pills or red pills
First, let me explain what I mean by malware vaccination tricks. Most of you will have heard about some of these. Vaccination tricks are in fact techniques that use safety checks done by malware against that same malware. The malware checks for the presence of certain files or registry keys as a...
DELTA - SDN Security Evaluation Framework
DELTA is a penetration testing framework that regenerates known attack scenarios for diverse test cases. This framework also provides the capability of discovering unknown security problems in SDN by employing a fuzzing technique. Agent-Manager is the control tower. It takes full control over all...
[SECURITY] Fedora 26 Update: xen-4.8.1-7.fc26
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
[SECURITY] Fedora 26 Update: xen-4.8.1-6.fc26
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
Trend Micro Identified as a Representative Vendor for its Protection Capabilities For Cloud Workloads
We are proud to be included in this year’s Gartner Market Guide for Cloud Workload Protection Platforms report, which included 24 security leaders in Cloud Workload Protection solutions. Trend Micro was identified with 16 out of 21 capabilities listed by Gartner. Trend Micro delivers unique serve...
openstack-neutron: iptables not active after update
A race-condition flaw was discovered in openstack-neutron where, following a minor overcloud update, neutron security groups were disabled. Specifically, the following were reset to 0: net.bridge.bridge-nf-call-ip6tables and net.bridge.bridge-nf-call-iptables. The race was only triggered by an...
openstack-neutron: iptables not active after update
A race-condition flaw was discovered in openstack-neutron where, following a minor overcloud update, neutron security groups were disabled. Specifically, the following were reset to 0: net.bridge.bridge-nf-call-ip6tables and net.bridge.bridge-nf-call-iptables. The race was only triggered by an...
openstack-neutron: iptables not active after update
A race-condition flaw was discovered in openstack-neutron where, following a minor overcloud update, neutron security groups were disabled. Specifically, the following were reset to 0: net.bridge.bridge-nf-call-ip6tables and net.bridge.bridge-nf-call-iptables. The race was only triggered by an...
Moderate: Red Hat Enhancement Advisory: Red Hat Virtualization Manager (ovirt-engine) 4.1.4
An update is now available for Red Hat Virtualization Manager. The Red Hat Virtualization Manager is a centralized management platform that allows system administrators to view and manage virtual machines. The Manager provides a comprehensive range of features including search capabilities,...
[SECURITY] Fedora 25 Update: xen-4.7.2-7.fc25
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
[SECURITY] Fedora 26 Update: xen-4.8.1-4.fc26
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
Libgcrypt Attack Allowed Recovery of RSA-1024 Keys
The cryptographic library Libgcrypt is vulnerable to a local side-channel attack; something researchers warn could allow full key recovery for RSA-1024. The vulnerability CVE-2017-7526 is tied to the fact that Libgcrypt, which is based on code from GnuPG, uses left to right sliding windows...
[SECURITY] Fedora 24 Update: xen-4.6.5-7.fc24
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
rhosp-director: libvirtd is deployed with no authentication
A design flaw issue was found in the Red Hat OpenStack Platform director use of TripleO to enable libvirtd based live-migration. Libvirtd is deployed by default by director listening on 0.0.0.0 all interfaces with no-authentication or encryption. Anyone able to make a TCP connection to any comput...
Moderate: Red Hat Security Advisory: openstack-nova security, bug fix, and enhancement update
An update for openstack-nova is now available for Red Hat OpenStack Platform 9.0 Mitaka. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
RHEL 7 : qemu-kvm (RHSA-2017:1430)
An update for qemu-kvm is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
PT-2017-16191
Name of the Vulnerable Software and Affected Versions VMware Workstation Pro/Player versions prior to 12.5.3 Description The issue is related to a NULL pointer dereference in the SVGA driver. This could allow attackers with normal user privileges to crash their virtual machines. Recommendations F...
CVE-2016-3077
The VersionMapper.fromKernelVersionString method in oVirt Engine allows remote authenticated users to cause a denial of service process crash for all VMs...