CVE-2024-37302

Synapse (Matrix homeserver) versions before 1.106 are vulnerable to a disk-fill DoS where an unauthenticated attacker can cause extensive remote-media downloads and caching due to inadequate default rate limiting. Synapse 1.106 adds a leaky-bucket rate limit on remote media downloads to help miti...

CVE-2024-37302 Synapse denial of service through media disk space consumption

Synapse is an open-source Matrix homeserver. Synapse versions before 1.106 are vulnerable to a disk fill attack, where an unauthenticated adversary can induce Synapse to download and cache large amounts of remote media. The default rate limit strategy is insufficient to mitigate this. This can le...

CVE-2024-37302 Synapse denial of service through media disk space consumption

Synapse is an open-source Matrix homeserver. Synapse versions before 1.106 are vulnerable to a disk fill attack, where an unauthenticated adversary can induce Synapse to download and cache large amounts of remote media. The default rate limit strategy is insufficient to mitigate this. This can le...

CVE-2024-37302 Synapse denial of service through media disk space consumption

Synapse is an open-source Matrix homeserver. Synapse versions before 1.106 are vulnerable to a disk fill attack, where an unauthenticated adversary can induce Synapse to download and cache large amounts of remote media. The default rate limit strategy is insufficient to mitigate this. This can le...

CVE-2024-37302

Synapse is an open-source Matrix homeserver. Synapse versions before 1.106 are vulnerable to a disk fill attack, where an unauthenticated adversary can induce Synapse to download and cache large amounts of remote media. The default rate limit strategy is insufficient to mitigate this. This can le...

Restore to oVirt KVM VM Post-Restore Recommended Actions

Purpose This article documents recommended post-restore actions that should be taken after restoring VMs, physical machines, and cloud machines to the oVirt KVM hypervisor. Solution Starting in the oVirt KVM Plug-In included with Veeam Backup & Replication 12.3, a feature has been added that allo...

Element Synapse 安全漏洞

Element Synapse is an open source Matrix home server implementation from Element Open Source. A security vulnerability exists in Element Synapse versions prior to 1.106, which stems from vulnerability to a disk stuffing attack, where an unauthenticated attacker can trick Synapse into downloading...

Unable to encrypt Identity disk on AWS when using encrypted master image

The AMI was created using an encrypted instance\snapshot. However, the MCS machines appear with identity disk "Not encrypted"...

Sensitive Information Exposure

filament/actions is vulnerable to Sensitive Information Exposure. The vulnerability is due to insecure default configuration, specifically setting the public disk as the default storage disk, which allows sensitive files, such as exports, to be stored in a location that is publicly accessible,...

CVE-2024-31141

A flaw was found in Apache Kafka Clients. Apache Kafka Clients accepts configuration data for customizing behavior and includes ConfigProvider plugins to manipulate these configurations. Apache Kafka also provides FileConfigProvider, DirectoryConfigProvider, and EnvVarConfigProvider...

Astra Linux – Vulnerability in zziplib

A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a denial of service through the zzipFetchDiskTrailer function located in the /zzip/zip.c file...

CVE-2024-51766

A potential security vulnerability has been identified in the HPE NonStop DISK UTIL T9208 product. This vulnerability could be exploited to cause a denial of service DoS to NonStop server. It exists in all prior DISK UTIL product versions of L-series and J-series...

CVE-2024-51766 HPE NonStop DISK UTIL, Local Denial of Service vulnerability

A potential security vulnerability has been identified in the HPE NonStop DISK UTIL T9208 product. This vulnerability could be exploited to cause a denial of service DoS to NonStop server. It exists in all prior DISK UTIL product versions of L-series and J-series...

CVE-2024-51766

The CVE-2024-51766 entry concerns HPE NonStop DISK UTIL (T9208) and affects all prior DISK UTIL versions of L-series and J-series. The connected sources indicate a local denial-of-service condition with an exploit path that requires low privileges and no user interaction, with the impact describe...

CVE-2024-51766 HPE NonStop DISK UTIL, Local Denial of Service vulnerability

A potential security vulnerability has been identified in the HPE NonStop DISK UTIL T9208 product. This vulnerability could be exploited to cause a denial of service DoS to NonStop server. It exists in all prior DISK UTIL product versions of L-series and J-series...

PT-2024-34897 · Hewlett Packard · Hpe Nonstop Disk Util

Name of the Vulnerable Software and Affected Versions: HPE NonStop DISK UTIL T9208 versions prior to the fixed version affected versions not specified Description: A potential security issue has been identified in the HPE NonStop DISK UTIL product, which could be exploited to cause a denial of...

Hewlett Packard Enterprise NonStop DISK UTIL 安全漏洞

Hewlett Packard Enterprise NonStop DISK UTIL HPE NonStop DISK UTIL is a disk utility from Hewlett Packard Enterprise. A security vulnerability exists in Hewlett Packard Enterprise NonStop DISK UTIL that stems from the presence of a local denial of service vulnerability...

CVE-2024-50189

In the Linux kernel, the following vulnerability has been resolved: HID: amdsfh: Switch to device-managed dmamalloccoherent Using the device-managed version allows to simplify clean-up in probe error path. Additionally, this device-managed ensures proper cleanup, which helps to resolve memory...

"Failed to publish malware detection metadata to the catalog"

Challenge A backup job's task is completed with the warning: Failed to publish guest file system index to the catalog The warning above appears at the task level when a machine is selected in the Statistics window. An additional message will appear in the Statistics window at the job summary leve...

GHSA-2X2G-32R7-P4X8 Apache Kafka Clients: Privilege escalation to filesystem read-access via automatic ConfigProvider

Files or Directories Accessible to External Parties, Improper Privilege Management vulnerability in Apache Kafka Clients. Apache Kafka Clients accept configuration data for customizing behavior, and includes ConfigProvider plugins in order to manipulate these configurations. Apache Kafka also...