DLA-223-1 nbd - security update

Bulletin has no description...

Network Block Device nbd-server.c Insecure Signal Handling Denial of Service Vulnerability

Network Block Device NBD is a stable, efficient open source network storage software can be used to build Linux-based network storage system. Network Block Device nbd-server.c insecure use of the signal processor allows remote attackers to exploit vulnerabilities for deadlock attacks that can lea...

The vulnerability of the Gentoo Linux operating system allows a malicious intruder to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the nbd package up to version 2.8.2-r1 of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

Vulnerabilities in the operating system openSUSE, which allow a malicious individual to compromise the accessibility of protected information

The drbd-kmp-trace package of the OpenSUSE operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

SuSE 11.3 Security Update : Linux Kernel (SAT Patch Numbers 10412 / 10415 / 10416)

The SUSE Linux Enterprise 11 SP3 kernel has been updated to receive various security and bugfixes. New features enabled : - The Ceph and rbd remote network block device drivers are now enabled and supported, to serve as client for SUSE Enterprise Storage 1.0. FATE318328 - Support to selected Bay...

SUSE-SU-2015:0529-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 kernel was updated to 3.12.38 to receive various security and bugfixes. This update contains the following feature enablements: - The remote block device rbd and ceph drivers have been enabled and are now supported. FATE318350 These can be used e.g. for accessing the...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64 (20140723)

A NULL pointer dereference flaw was found in the rdsiwladdrcheck function in the Linux kernel's implementation of Reliable Datagram Sockets RDS. A local, unprivileged user could use this flaw to crash the system. CVE-2014-2678, Moderate - It was found that the Xen hypervisor implementation did...

CentOS 5 : kernel (CESA-2014:0926)

Updated kernel packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Moderate: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

openSUSE Security Update : kernel (openSUSE-SU-2013:0824-1)

Linux kernel was updated to kernel 3.4.42 fixing various bugs and security issues. - Refresh patches.suse/SUSE-bootsplash. Fix bootsplash breakage due to stable fix bnc813963 - Linux 3.4.39. - kABI: protect struct tracer. - Linux 3.4.38 bnc808829,CVE-2013-0913. -...

[SECURITY] Fedora 19 Update: srm-1.2.13-1.fc19

srm is a secure replacement for rm1. Unlike the standard rm, it overwrites the data in the target files before unlinkg them. This prevents command-line recovery of the data by examining the raw block device. It may also help frustrate physical examination of the disk, although it's unlikely that...

Fedora Update for nbd FEDORA-2013-22557

Check for the Version of nbd OpenVAS Vulnerability Test Fedora Update for nbd FEDORA-2013-22557 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

USN-2093-1: libvirt vulnerabilities

Martin Kletzander discovered that libvirt incorrectly handled reading memory tunables from LXC guests. A local user could possibly use this flaw to cause libvirtd to crash, resulting in a denial of service. This issue only affected Ubuntu 13.10. CVE-2013-6436 Dario Faggioli discovered that libvir...

Fedora Update for nbd FEDORA-2013-22610

Check for the Version of nbd OpenVAS Vulnerability Test Fedora Update for nbd FEDORA-2013-22610 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

[SECURITY] Fedora 20 Update: nbd-3.5-1.fc20

Tools for the Linux Kernel's network block device, allowing you to use remote block devices over a TCP/IP network...

[SECURITY] Fedora 18 Update: nbd-3.5-1.fc18

Tools for the Linux Kernel's network block device, allowing you to use remote block devices over a TCP/IP network...

[SECURITY] Fedora 19 Update: nbd-3.5-1.fc19

Tools for the Linux Kernel's network block device, allowing you to use remote block devices over a TCP/IP network...

CVE-2013-6410

nbd-server in Network Block Device nbd before 3.5 does not properly check IP addresses, which might allow remote attackers to bypass intended access restrictions via an IP address that has a partial match in the authfile configuration file...

Design/Logic Flaw

nbd-server in Network Block Device nbd before 3.5 does not properly check IP addresses, which might allow remote attackers to bypass intended access restrictions via an IP address that has a partial match in the authfile configuration file...

CVE-2013-6410

CVE-2013-6410 affects the NBD server (nbd) prior to version 3.5, where IP address checking can be bypassed by using an IP with a partial match in the authfile. The vulnerability allows remote attackers to bypass access restrictions. Affected product: nbd server in Network Block Device; vulnerable...