Cisco Nexus 1000V Switch for VMware vSphere Secure Login Enhancements Denial of Service Vulnerability

A vulnerability in the Secure Login Enhancements capability of Cisco Nexus 1000V Switch for VMware vSphere could allow an unauthenticated, remote attacker to cause an affected Nexus 1000V Virtual Supervisor Module VSM to become inaccessible to users through the CLI. The vulnerability is due to...

Photon OS 2.0: Linux PHSA-2020-2.0-0212

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0212. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid134084...

VMWare OpenSLP Heap Buffer Overflow (CVE-2019-5544; CVE-2021-21974)

A heap buffer overflow vulnerability exists in OpenSLP. The vulnerability is due to improperly checking the bounds of a buffer before copying data to it. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted request to OpenSLP service on port 427...

Bringing Intrinsic Security to RSA Conference 2020

This year at the RSA Conference, VMware will be highlighting our vision for Intrinsic Security, a safer, more effective security built into the fabric of the various infrastructure control points that are vulnerable to attack endpoint, identity, network, cloud, workload. The VMware Carbon Black...

Photon OS 1.0: Python2 PHSA-2020-1.0-0280

An update of the python2 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0280. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 1.0: Linux PHSA-2020-1.0-0279

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0279. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid134040...

Photon OS 3.0: Ipmitool PHSA-2020-3.0-0059

An update of the ipmitool package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0059. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid133957;...

EulerOS 2.0 SP5 : openslp (EulerOS-SA-2020-1120)

According to the version of the openslp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the...

VMware Carbon Black Cloud Endpoint Standard Installed (Windows)

Binary data vmwarecarbonblackcloudendpointstandardwininstalled.nbin...

Photon OS 3.0: Python2 PHSA-2020-3.0-0057

An update of the python2 package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0057. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid133809;...

Photon OS 3.0: Libsolv PHSA-2020-3.0-0057

An update of the libsolv package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0057. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid133807;...

VMware Carbon Black Cloud Endpoint Standard Inactive

Binary data vmwarecarbonblackcloudendpointstandardwinstatus.nbin...

Photon OS 1.0: Bash PHSA-2020-1.0-0277

An update of the bash package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0277. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid133812;...

VMware Releases Security Updates for vRealize Operations for Horizon Adapter

VMware has released security updates to address multiple vulnerabilities in vRealize Operations for Horizon Adapter. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and...

Potential data loss when using Instant VM Recovery

Challenge Performing Instant VM Recovery in VMware vSphere environments may result in data loss when using the quick migration feature to move published VM disks to production storage to finalize the recovery. This issue was identified internally by Veeam quality control in late 2019, and the fix...

VMSA-2020-0004:VMware Horizon Client, VMRC, VMware Workstation and Fusion updates address use-after-free and privilege escalation vulnerabilities

Advisory ID: VMSA-2020-0004.1 CVSSv3 Range: 7.3-9.3 Issue Date:2020-03-12 Updated On: 2020-03-14 CVEs: CVE-2019-5543, CVE-2020-3947 , CVE-2020-3948 Synopsis: VMware Horizon Client, VMRC, VMware Workstation and Fusion updates address use-after-free and privilege escalation vulnerabilities...

See the Advantages of Intrinsic Security | Join the Webinar Next Week

At VMware Carbon Black, we’re excited to continue exploring our approach to Intrinsic Security. What what does “intrinsic security” mean, and how does it help enhance and support an organization’s existing security stack? Truly, there has never been a more challenging nor exciting time in...

Photon OS 2.0: Envoy PHSA-2020-2.0-0207

An update of the envoy package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0207. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid133687...

Photon OS 1.0: Python3 PHSA-2020-1.0-0276

An update of the python3 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0276. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

VMware Carbon Black TAU: Ryuk Ransomware Technical Analysis

Ryuk Ransomware has been crippling both the public and private sector recently with the ability to disrupt its target environment. The ransomware will typically be dropped by an already compromised system that has been infected by Trickbot or Emotet through a phishing email. Once the Ryuk payload...