335 matches found
macOS XNU - Copy-on-Write Behaviour Bypass via Partial-Page Truncation of File Exploit
/ XNU has various interfaces that permit creating copy-on-write copies of data between processes, including out-of-line message descriptors in mach messages. It is important that the copied memory is protected against later modifications by the source process; otherwise, the source process might ...
macOS XNU - Copy-on-Write Behaviour Bypass via Partial-Page Truncation of File
/ XNU has various interfaces that permit creating copy-on-write copies of data between processes, including out-of-line message descriptors in mach messages. It is important that the copied memory is protected against later modifications by the source process; otherwise, the source process might ...
Performance Impacts of Deduplicated Storage Systems
To learn about Deduplication Appliance Best Practices, visit KB1745. Challenge The following Veeam technologies are dependent on primary backup storage random I/O performance: Instant Recovery VM/Disk/NAS/Databases Windows and Linux File Level Recovery Application Restore Cloud Tiering Cloud...
‘The revision level is unknown’ upon Guest OS File restore
Challenge When attempting to restore files from a backup of a server that was running Windows 2016 or 2019 and had Deduplication enabled for some or all of the drives, the restore fails with the following error: Failed to restore "" Error: Failed to read xx bytes from the file...
Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15885)
The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the "Delete Email Alerts" method in versions of Quest DR Series disk backup software prior to version 4.0.3.1. An attacker could exploit this vulnerability to execute commands...
April 17, 2018—KB4093121 (Preview of Monthly Rollup)
None None...
restic cryptography
tl;dr: this is not an audit and I take no responsibility for your backups, but I had a quick look at the crypto and I think I'm going to use restic for my personal backups. I keep hearing good things about restic. I am redoing my storage solution, and restic seems to tick all the boxes for my...
Attic 'attic/archiver.py' security bypass vulnerability
Attic is a Python based data backup program that uses deduplication technology. A security bypass vulnerability exists in Attic. An attacker could use this vulnerability to bypass security restrictions and perform unauthorized operations...
July 18, 2017—KB4025334 (OS Build 14393.1532)
None None...
PT-2017-4328
Name of the Vulnerable Software and Affected Versions: Linux kernel versions 4.4.0-96.119 and later Description: A flaw in the Linux kernel's memory deduplication mechanism, specifically in the Kernel Samepage Merging KSM component, can create a side channel. This allows an attacker to potentiall...
Creating a backup storage dump
Purpose This article documents how to create a "storage dump" from a Veeam backup file. The storage dump is a human-readable output of the backup file's metadata containing: Backup file parameters FIB files-in-backup hierarchy FIB blocks map Offset / size / compression type of data blocks...
UBUNTU-CVE-2015-2877
DISPUTED Kernel Samepage Merging KSM in the Linux kernel 2.6.32 through 4.x does not prevent use of a write-timing side channel, which allows guest OS users to defeat the ASLR protection mechanism on other guest OS instances via a Cross-VM ASL INtrospection CAIN attack. NOTE: the vendor states...
CVE-2015-2877
Kernel Samepage Merging KSM in the Linux kernel 2.6.32 through 4.x does not prevent use of a write-timing side channel, which allows guest OS users to defeat the ASLR protection mechanism on other guest OS instances via a Cross-VM ASL INtrospection CAIN attack. NOTE: the vendor states "Basically ...
DEBIAN-CVE-2015-2877
Kernel Samepage Merging KSM in the Linux kernel 2.6.32 through 4.x does not prevent use of a write-timing side channel, which allows guest OS users to defeat the ASLR protection mechanism on other guest OS instances via a Cross-VM ASL INtrospection CAIN attack. NOTE: the vendor states "Basically ...
CVE-2015-2877
Kernel Samepage Merging KSM in the Linux kernel 2.6.32 through 4.x does not prevent use of a write-timing side channel, which allows guest OS users to defeat the ASLR protection mechanism on other guest OS instances via a Cross-VM ASL INtrospection CAIN attack. NOTE: the vendor states "Basically ...
CVE-2015-2877
Kernel Samepage Merging KSM in the Linux kernel 2.6.32 through 4.x does not prevent use of a write-timing side channel, which allows guest OS users to defeat the ASLR protection mechanism on other guest OS instances via a Cross-VM ASL INtrospection CAIN attack. NOTE: the vendor states "Basically ...
PT-2017-1614 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions 2.6.32 through 4.x Description: The issue is related to the Kernel Samepage Merging KSM component in the Linux kernel, which does not prevent the use of a write-timing side channel. This allows guest OS users to defeat t...
June 2016 update rollup for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2
June 2016 update rollup for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 This update rollup is superseded by July 2016 update rollup for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 KB3172614 that was released on July 21, 2016. The June 2016 update rollup for Windows RT 8.1,...
Cluster service fails when shutting down or data deduplication fails with "Drive is locked" in Windows Server 2012 R2
Cluster service fails when shutting down or data deduplication fails with "Drive is locked" in Windows Server 2012 R2 This article describes two issues that are addressed in this update: the cluster service fails when it's being shut down and data deduplication fails with the "This drive is locke...
