CVE-2018-2877

CVE-2018-2877 affects Oracle MySQL Cluster (subcomponent: Cluster: ndbcluster/plugin). Affected are MySQL Cluster versions 7.2.27 and earlier, 7.3.16 and earlier, 7.4.14 and earlier, and 7.5.5 and earlier. The vulnerability allows a low-privilege attacker who can log on to the infrastructure wher...

[SECURITY] Fedora 27 Update: corosync-2.4.4-1.fc27

This package contains the Corosync Cluster Engine Executive, several default APIs and libraries, default configuration files, and an init script...

CVE-2018-1240

Dell EMC ViPR Controller, versions after 3.0.0.38, contain an information exposure vulnerability in the VRRP. VRRP defaults to an insecure configuration in Linux's keepalived component which sends the cluster password in plaintext through multicast. A malicious user, having access to the vCloud...

CVE-2018-1240

Dell EMC ViPR Controller, versions after 3.0.0.38, contain an information exposure vulnerability in the VRRP. VRRP defaults to an insecure configuration in Linux's keepalived component which sends the cluster password in plaintext through multicast. A malicious user, having access to the vCloud...

Debian DSA-4174-1 : corosync - security update

The Citrix Security Response Team discovered that corosync, a cluster engine implementation, allowed an unauthenticated user to cause a denial-of-service by application crash. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Securi...

Unspecified Vulnerability in Oracle MySQL Cluster (CNVD-2018-09087)

Oracle MySQL Server is a lightweight relational database system. An unspecified vulnerability exists in the Cluster: ndbcluster/plugin component of Oracle MySQL Cluster. An attacker could exploit this vulnerability to affect availability...

[SECURITY] [DSA 4174-1] corosync security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4174-1 [email protected] https://www.debian.org/security/ Sebastien Delafond April 17, 2018 https://www.debian.org/security/faq -...

[SECURITY] Fedora 28 Update: corosync-2.4.4-1.fc28

This package contains the Corosync Cluster Engine Executive, several default APIs and libraries, default configuration files, and an init script...

MySQL -- multiple vulnerabilities

Oracle reports: MySQL Multiple Flaws Let Remote Authenticated Users Access and Modify Data, Remote and Local Users Deny Service, and Local Users Access Data and Gain Elevated Privileges A local user can exploit a flaw in the Replication component to gain elevated privileges CVE-2018-2755. A remot...

[SECURITY] Fedora 28 Update: pcs-0.9.164-1.fc28

pcs is a corosync and pacemaker configuration tool. It permits users to easily view, modify and create pacemaker based clusters...

Product update: Virtuozzo 7.0 Update 7 Hotfix 1 (7.0.7-445)

The Hotfix 1 for Virtuozzo 7.0 Update 7 provides stability and usability bug fixes. Vulnerability id: PSBM-82558 Container migration could sometimes fail due to a CRIU issue. Vulnerability id: PSBM-82711 'prlctl qemu-update' could fail due to unnamed dirty bitmaps. This could result in backups no...

CVE-2018-1315

In Apache Hive 2.1.0 to 2.3.2, when 'COPY FROM FTP' statement is run using HPL/SQL extension to Hive, a compromised/malicious FTP server can cause the file to be written to an arbitrary location on the cluster where the command is run from. This is because FTP client code in HPL/SQL does not veri...

[SECURITY] Fedora 28 Update: slurm-17.11.5-2.fc28

Slurm is an open source, fault-tolerant, and highly scalable cluster management and job scheduling system for large and small Linux clusters...

How to Back Up a Windows Failover Cluster with Veeam Agent for Microsoft Windows

Solution Information regarding Failover Cluster Support is available in the Veeam Agent Management Guide: Failover Cluster Support How to Protect Failover Clusters If this KB article did not resolve your issue or you need further assistance with Veeam software, please create a Veeam Support Case...

atomic-openshift: cluster-reader can escalate to creating builds via webhooks in any project

An improper authorization flaw in the atomic-openshift component of Openshift Container Platform 3.7 and earlier allows a user with cluster-reader project viewer permissions to trigger an application build. An attacker could use this flaw to trigger a build of an application when that should be...

[SECURITY] Fedora 27 Update: slurm-17.02.10-1.fc27

Slurm is an open source, fault-tolerant, and highly scalable cluster management and job scheduling system for large and small Linux clusters...

Dell EMC Isilon Cross-Site Scripting Vulnerability

DELL EMC Isilon is a horizontally scalable storage system for unstructured data from Dell.OneFS web administration interface is one of the web administration interfaces. A cross-site scripting vulnerability exists in the Cluster description of the OneFS web administration interface in Dell EMC...

CVE-2018-1186

Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is affected by a cross-site scripting vulnerability in the Cluster description of the OneFS web administration interface. A malicious administrator may potentially...

CVE-2018-1186

Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is affected by a cross-site scripting vulnerability in the Cluster description of the OneFS web administration interface. A malicious administrator may potentially...

CVE-2018-1186

Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is affected by a cross-site scripting vulnerability in the Cluster description of the OneFS web administration interface. A malicious administrator may potentially...