Microsoft Windows Routing and Remote Access Service 安全漏洞

Microsoft Windows Routing and Remote Access Service is a network service from Microsoft Corporation USA that is used to perform functions such as network routing, virtual private networks VPNs, and dial-up connections. A security vulnerability exists in Microsoft Windows Routing and Remote Access...

Microsoft Windows Standards-Based Storage Management Service 安全漏洞

Microsoft Windows Standards-Based Storage Management Service is a standards-based storage management service from Microsoft Corporation USA that provides the ability to discover, configure, and monitor storage resources. A security vulnerability exists in Microsoft Windows Standards-Based Storage...

Microsoft Simple Certificate Enrollment Protocol 资源管理错误漏洞

Microsoft Simple Certificate Enrollment Protocol is a Microsoft Corporation USA protocol for automating certificate enrollment that allows devices to request and receive certificates through a simple process. A resource management error vulnerability exists in Microsoft Simple Certificate...

KB5044321: Windows Server 2008 R2 Security Update (October 2024)

The remote Windows host is missing security update 5044321. It is, therefore, affected by multiple vulnerabilities - Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability CVE-2024-38212, CVE-2024-38261, CVE-2024-38265, CVE-2024-43453, CVE-2024-43549, CVE-2024-43564,...

KB5044343: Windows Server 2012 R2 Security Update (October 2024)

The remote Windows host is missing security update 5044343. It is, therefore, affected by multiple vulnerabilities - Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability CVE-2024-38212, CVE-2024-38261, CVE-2024-38265, CVE-2024-43453, CVE-2024-43549, CVE-2024-43564,...

Microsoft Windows Kerberos 安全漏洞

Microsoft Windows Kerberos is a software for authentication in network clusters from Microsoft Corporation USA.Kerberos also serves as a network authentication protocol designed to provide strong authentication services to client/server applications through a key system. A security vulnerability...

(RHSA-2024:7436) Moderate: Red Hat OpenShift for Windows Containers 10.17.0 product release

Red Hat OpenShift for Windows Containers allows you to deploy Windows container workloads running on Windows Server containers...

CVE-2024-8405

An arbitrary file creation vulnerability exists in PaperCut NG/MF that only affects Windows servers with Web Print enabled. This specific flaw exists within the web-print.exe process, which can incorrectly create files that don’t exist when a maliciously formed payload is provided. This can be us...

CVE-2024-8404

An arbitrary file deletion vulnerability exists in PaperCut NG/MF, specifically affecting Windows servers with Web Print enabled. To exploit this vulnerability, an attacker must first obtain local login access to the Windows Server hosting PaperCut NG/MF and be capable of executing low-privilege...

CVE-2024-8404

An arbitrary file deletion vulnerability exists in PaperCut NG/MF, specifically affecting Windows servers with Web Print enabled. To exploit this vulnerability, an attacker must first obtain local login access to the Windows Server hosting PaperCut NG/MF and be capable of executing low-privilege...

CVE-2024-8404 Arbitrary File Deletion in PaperCut NG/MF Web Print Hot folder

An arbitrary file deletion vulnerability exists in PaperCut NG/MF, specifically affecting Windows servers with Web Print enabled. To exploit this vulnerability, an attacker must first obtain local login access to the Windows Server hosting PaperCut NG/MF and be capable of executing low-privilege...

CVE-2024-8404

CVE-2024-8404 describes an arbitrary file deletion vulnerability in PaperCut NG/MF on Windows servers with Web Print enabled. An attacker must have local login access and be able to run low-privilege code via the web-print-hot-folder to delete targeted files. The issue is tied to a split from CVE...

Microsoft多款产品 安全漏洞

Microsoft Windows and others are products of Microsoft Corporation USA.Microsoft Windows is a set of operating systems for use on personal devices.Microsoft Windows Server 2016 is a desktop operating system.Microsoft Windows Server 2019 is a desktop operating system. A security vulnerability exis...

Minimum supported OS version for Veeam VSS Hardware Provider is Microsoft Server 2012 (64-bit only).

Challenge An attempt to rescan, upgrade, or update the Veeam Backup Server fails with the error: Minimum supported OS version for Veeam VSS Hardware Provider is Microsoft Server 2012 64-bit only. Cause This issue occurs because an entry in the Configuration Database causes the Veeam Backup &...

CVE-2024-46796

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double put of @cfile in smb2setpathsize If smb2compoundop is called with a valid @cfile and returned -EINVAL, we need to call cifsgetwritablepath before retrying it as the reference of @cfile was already dropped ...

DEBIAN-CVE-2024-46796

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double put of @cfile in smb2setpathsize If smb2compoundop is called with a valid @cfile and returned -EINVAL, we need to call cifsgetwritablepath before retrying it as the reference of @cfile was already dropped ...

CVE-2024-46796 smb: client: fix double put of @cfile in smb2_set_path_size()

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double put of @cfile in smb2setpathsize If smb2compoundop is called with a valid @cfile and returned -EINVAL, we need to call cifsgetwritablepath before retrying it as the reference of @cfile was already dropped ...

CVE-2024-46796

CVE-2024-46796 affects the Linux kernel CIFS SMB2 path handling (smb2_set_path_size). The issue was a double put of @cfile when smb2_compound_op() returns -EINVAL, leading to use-after-free risks in the SMB/CIFS path, as the reference to @cfile could be dropped earlier. The fix ensures cifs_get_w...

CVE-2024-46796 smb: client: fix double put of @cfile in smb2_set_path_size()

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double put of @cfile in smb2setpathsize If smb2compoundop is called with a valid @cfile and returned -EINVAL, we need to call cifsgetwritablepath before retrying it as the reference of @cfile was already dropped ...

CVE-2024-46796 smb: client: fix double put of @cfile in smb2_set_path_size()

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double put of @cfile in smb2setpathsize If smb2compoundop is called with a valid @cfile and returned -EINVAL, we need to call cifsgetwritablepath before retrying it as the reference of @cfile was already dropped ...