CVE-2014-0134

The instance rescue mode in OpenStack Compute Nova 2013.2 before 2013.2.3 and Icehouse before 2014.1, when using libvirt to spawn images and usecowimages is set to false, allows remote authenticated users to read certain compute host files by overwriting an instance disk with a crafted image...

CVE-2014-0110: Undefined Security Weakness

Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service /tmp disk consumption via a large invalid SOAP message...

PT-2014-3940

Name of the Vulnerable Software and Affected Versions IBM WebSphere MQ versions 7.1.x through 7.1.0.4 IBM WebSphere MQ versions 7.5.x through 7.5.0.3 Description The issue allows remote attackers to cause a denial of service, resulting in disk or CPU consumption, via unspecified vectors...

CVE-2014-0911: Undefined Security Weakness

inetd in IBM WebSphere MQ 7.1.x before 7.1.0.5 and 7.5.x before 7.5.0.4 allows remote attackers to cause a denial of service disk or CPU consumption via unspecified vectors...

Qemu: vhdx: bounds checking for block_size and logical_sector_size

Qemu before 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite loops and other potential issues when calculating BAT entries, due to missing bounds checks for blocksize and logicalsectorsize variables. These are used to derive other fields like 'sectorsperblock' etc. A user able t...

Unable to mount disk: unsupported disk type

Challenge When attempting to perform a Guest Files Windows Restore the operation fails with the following error: Unable to mount disk: unsupported disk type Solution It is critical that the Microsoft Windows File Recovery page in the user guide is reviewed to confirm restore compatibility. There...

Scientific Linux Security Update : qemu-kvm on SL6.x i386/x86_64 (20140422)

Multiple integer overflow, input validation, logic error, and buffer overflow flaws were discovered in various QEMU block drivers. An attacker able to modify a disk image file loaded by a guest could use these flaws to crash the guest, or corrupt QEMU process memory on the host, potentially...

PT-2014-3708

Name of the Vulnerable Software and Affected Versions Junos versions prior to 11.4R10-S1 Junos versions prior to 11.4R11 Junos 12.1X44 versions prior to 12.1X44-D26 Junos 12.1X44 versions prior to 12.1X44-D30 Junos 12.1X45 versions prior to 12.1X45-D20 Junos 12.1X46 versions prior to 12.1X46-D10...

CVE-2014-0612: Undefined Security Weakness

Unspecified vulnerability in Juniper Junos before 11.4R10-S1, before 11.4R11, 12.1X44 before 12.1X44-D26, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, and 12.1X46 before 12.1X46-D10, when Dynamic IPsec VPN is configured, allows remote attackers to cause a denial of service new Dynamic...

[SECURITY] Fedora 19 Update: udisks-1.0.4-12.fc19

udisks provides a daemon, D-Bus API and command line tools for managing disks and storage devices...

Moderate: Red Hat Security Advisory: openstack-nova security and bug fix update

Updated openstack-nova packages that fix three security issues and one bug are now available for Red Hat Enterprise Linux OpenStack Platform 3.0. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, whic...

nova: Live migration can leak root disk into ephemeral storage

The icreateimagesandbacking aka createimagesandbacking method in libvirt driver in OpenStack Compute Nova Grizzly, Havana, and Icehouse, when using KVM live block migration, does not properly create all expected files, which allows attackers to obtain snapshot root disk contents of other users vi...

[SECURITY] Fedora 20 Update: udisks-1.0.4-13.fc20

udisks provides a daemon, D-Bus API and command line tools for managing disks and storage devices...

ePhone Disk v1.0.2 iOS - Multiple Web Vulnerabilities

Document Title: =============== ePhone Disk v1.0.2 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1230 Release Date: ============= 2014-03-25 Vulnerability Laboratory ID VL-ID: ==================================== 1230...

[SECURITY] Fedora 19 Update: k4dirstat-2.7.0-0.14.20101010git6c0a9e6.fc19

KDirStat KDE Directory Statistics is a utility program that sums up disk usage for directory trees - very much like the Unix 'du' command. It can also help you clean up used space. K4DirStat is the port to KDE4...

[SECURITY] Fedora 20 Update: k4dirstat-2.7.0-0.14.20101010git6c0a9e6.fc20

KDirStat KDE Directory Statistics is a utility program that sums up disk usage for directory trees - very much like the Unix 'du' command. It can also help you clean up used space. K4DirStat is the port to KDE4...

ePhone Disk 1.0.2 iOS - Multiple Vulnerabilities

Document Title: =============== ePhone Disk v1.0.2 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1230 Release Date: ============= 2014-03-25 Vulnerability Laboratory ID VL-ID: ==================================== 1230...

ePhone Disk 1.0.2 LFI / Command Injection / DoS

Document Title: =============== ePhone Disk v1.0.2 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1230 Release Date: ============= 2014-03-25 Vulnerability Laboratory ID VL-ID: ==================================== 1230...

CVE-2014-1828

The iThoughts web server in the iThoughtsHD app 4.19 for iOS on iPad devices allows remote attackers to cause a denial of service disk consumption by uploading a large file...

CVE-2014-1828

The CVE-2014-1828 entry concerns iThoughtsHD for iOS (iPad), where the iThoughts web server component in version 4.19 exposes a Denial of Service risk via uploading large files. The observed impact is disk consumption leading to service disruption. The vulnerability details across connected sourc...