CVE-2024-37302

Synapse (Matrix homeserver) versions before 1.106 are vulnerable to a disk-fill DoS where an unauthenticated attacker can cause extensive remote-media downloads and caching due to inadequate default rate limiting. Synapse 1.106 adds a leaky-bucket rate limit on remote media downloads to help miti...

CVE-2024-37302

Synapse is an open-source Matrix homeserver. Synapse versions before 1.106 are vulnerable to a disk fill attack, where an unauthenticated adversary can induce Synapse to download and cache large amounts of remote media. The default rate limit strategy is insufficient to mitigate this. This can le...

CVE-2024-37302

Synapse is an open-source Matrix homeserver. Synapse versions before 1.106 are vulnerable to a disk fill attack, where an unauthenticated adversary can induce Synapse to download and cache large amounts of remote media. The default rate limit strategy is insufficient to mitigate this. This can le...

CVE-2024-37302 Synapse denial of service through media disk space consumption

Synapse is an open-source Matrix homeserver. Synapse versions before 1.106 are vulnerable to a disk fill attack, where an unauthenticated adversary can induce Synapse to download and cache large amounts of remote media. The default rate limit strategy is insufficient to mitigate this. This can le...

CVE-2024-37302

Synapse is an open-source Matrix homeserver. Synapse versions before 1.106 are vulnerable to a disk fill attack, where an unauthenticated adversary can induce Synapse to download and cache large amounts of remote media. The default rate limit strategy is insufficient to mitigate this. This can le...

CVE-2024-37302 Synapse denial of service through media disk space consumption

Synapse is an open-source Matrix homeserver. Synapse versions before 1.106 are vulnerable to a disk fill attack, where an unauthenticated adversary can induce Synapse to download and cache large amounts of remote media. The default rate limit strategy is insufficient to mitigate this. This can le...

CVE-2024-37302 Synapse denial of service through media disk space consumption

Synapse is an open-source Matrix homeserver. Synapse versions before 1.106 are vulnerable to a disk fill attack, where an unauthenticated adversary can induce Synapse to download and cache large amounts of remote media. The default rate limit strategy is insufficient to mitigate this. This can le...

Element Synapse security vulnerability

Element Synapse is an open source Matrix home server implementation from Element Open Source. A security vulnerability exists in Element Synapse versions prior to 1.106, which stems from vulnerability to a disk stuffing attack, where an unauthenticated attacker can trick Synapse into downloading...

Restore to oVirt KVM VM Post-Restore Recommended Actions

Purpose This article documents recommended post-restore actions that should be taken after restoring VMs, physical machines, and cloud machines to the oVirt KVM hypervisor. Solution Starting in the oVirt KVM Plug-In included with Veeam Backup & Replication 12.3, a feature has been added that allo...

CVE-2024-37302: Allocation of Resources Without Limits or Throttling

Synapse is an open-source Matrix homeserver. Synapse versions before 1.106 are vulnerable to a disk fill attack, where an unauthenticated adversary can induce Synapse to download and cache large amounts of remote media. The default rate limit strategy is insufficient to mitigate this. This can le...

Unable to encrypt Identity disk on AWS when using encrypted master image

The AMI was created using an encrypted instance\snapshot. However, the MCS machines appear with identity disk "Not encrypted"...

Sensitive Information Exposure

filament/actions is vulnerable to Sensitive Information Exposure. The vulnerability is due to insecure default configuration, specifically setting the public disk as the default storage disk, which allows sensitive files, such as exports, to be stored in a location that is publicly accessible,...

CVE-2024-31141

A flaw was found in Apache Kafka Clients. Apache Kafka Clients accepts configuration data for customizing behavior and includes ConfigProvider plugins to manipulate these configurations. Apache Kafka also provides FileConfigProvider, DirectoryConfigProvider, and EnvVarConfigProvider...

CVE-2024-51766

A potential security vulnerability has been identified in the HPE NonStop DISK UTIL T9208 product. This vulnerability could be exploited to cause a denial of service DoS to NonStop server. It exists in all prior DISK UTIL product versions of L-series and J-series...

CVE-2024-51766 HPE NonStop DISK UTIL, Local Denial of Service vulnerability

A potential security vulnerability has been identified in the HPE NonStop DISK UTIL T9208 product. This vulnerability could be exploited to cause a denial of service DoS to NonStop server. It exists in all prior DISK UTIL product versions of L-series and J-series...

CVE-2024-51766

The CVE-2024-51766 entry concerns HPE NonStop DISK UTIL (T9208) and affects all prior DISK UTIL versions of L-series and J-series. The connected sources indicate a local denial-of-service condition with an exploit path that requires low privileges and no user interaction, with the impact describe...

CVE-2024-51766 HPE NonStop DISK UTIL, Local Denial of Service vulnerability

A potential security vulnerability has been identified in the HPE NonStop DISK UTIL T9208 product. This vulnerability could be exploited to cause a denial of service DoS to NonStop server. It exists in all prior DISK UTIL product versions of L-series and J-series...

CVE-2024-51766: Improper Handling of Exceptional Conditions

A potential security vulnerability has been identified in the HPE NonStop DISK UTIL T9208 product. This vulnerability could be exploited to cause a denial of service DoS to NonStop server. It exists in all prior DISK UTIL product versions of L-series and J-series...

Hewlett Packard Enterprise NonStop DISK UTIL security vulnerability

Hewlett Packard Enterprise NonStop DISK UTIL HPE NonStop DISK UTIL is a disk utility from Hewlett Packard Enterprise. A security vulnerability exists in Hewlett Packard Enterprise NonStop DISK UTIL that stems from the presence of a local denial of service vulnerability...

PT-2024-34897 · Hewlett Packard · Hpe Nonstop Disk Util

Name of the Vulnerable Software and Affected Versions: HPE NonStop DISK UTIL T9208 versions prior to the fixed version affected versions not specified Description: A potential security issue has been identified in the HPE NonStop DISK UTIL product, which could be exploited to cause a denial of...