73 matches found
kernel: gfs2: NULL pointer dereference in gfs2_evict_inode()
A NULL pointer dereference flaw was found in the gfs2 file system in the Linux kernel. This issue occurs on corrupt gfs2 file systems when the evict code tries to reference the journal descriptor structure after it has been freed and set to NULL. This flaw allows a privileged local user to cause ...
kernel: gfs2: NULL pointer dereference in gfs2_evict_inode()
A NULL pointer dereference flaw was found in the gfs2 file system in the Linux kernel. This issue occurs on corrupt gfs2 file systems when the evict code tries to reference the journal descriptor structure after it has been freed and set to NULL. This flaw allows a privileged local user to cause ...
Oracle Linux 5 : gfs-kmod (ELSA-2010-0291)
The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0291 advisory. 0.1.34-12 - Fixes a problem where improper locking commands can crash the system. - Resolves: rhbz571298 0.1.34-11 - Fixes 'Resource tempory unavailable' for...
gfs-topgenetik.de Cross Site Scripting vulnerability OBB-3400612
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
HammerSpace GDE / GFS 4.6.6-324 Authentication Bypass Exploit
This utility generates the TOTP passcode used to sign in as the support service account user for HammerSpace GFS default installations. Both the OVA and ISO are affected. Versions 4.6.6-324 and below with a default installation are affected. Affected Product: HammerSpace Global Data Environment /...
HammerSpace GDE / GFS 4.6.6-324 Authentication Bypass
Affected Product: HammerSpace Global Data Environment / Global File System - https://hammerspace.com/product Affected Versions: v4.6.6-324 and below with default installation/configuration. Vendor Notified: Yes, sometime between: 08/2022 and 10/2022, confirmed 2023-03-21 there is a fix in an...
gfs-abi.de Cross Site Scripting vulnerability OBB-3192493
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
gfs-hofheim.de Cross Site Scripting vulnerability OBB-1410845
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Veeam Backup & Replication 10 Cumulative Patch 2
More Recent Version Available Please find the latest version of Veeam Backup & Replication here: Veeam Downloads - Latest Version Requirements Please confirm that you are running the GA build of version 10 build 10.0.0.4461 or 10.0.0.4461 P1 prior to installing this update. You can check this und...
Your service provider has implemented backup files protection against deletion by an insider for this cloud repository.
Intended Audience Keep in mind that the structure and message of this article are written assuming the reader is a Veeam Cloud Service Provider. Challenge A tenant's backup copy job with GFS disabled displays the following warning when targeting a Cloud Repository provided by a Veeam Cloud Servic...
weather.unisys.com XSS vulnerability
Vulnerable URL: http://weather.unisys.com/gfs/index.php?r=us%3C!%27/!%22/%27/%22/--!%3E%3C/Title/%3E%3C/Script/%3E%3CInput/Autofocus/%0D/Onfocus=confirmOPENBUGBOUNTY//%3E%3Csvg%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS...
Oracle: Security Advisory (ELSA-2010-0291)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RHEL 5 : gfs-kmod (RHSA-2010:0291)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2010:0291 advisory. The gfs-kmod packages contain modules that provide the ability to mount and use GFS file systems. A flaw was found in the gfslock implementation. The...
RHEL 5 : gfs-kmod (RHSA-2010:0521)
Updated gfs-kmod packages that fix one security issue are now available for Red Hat Enterprise Linux 5.4 Extended Update Support, kernel release 2.6.18-164.19.1.el5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System...
Scientific Linux Security Update : gfs-kmod on SL 5.0-5.4 i386/x86_64
This updated gfs-kmod is already in SL 5.5. A flaw was found in the gfslock implementation. The GFS locking code could skip the lock operation for files that have the SISGID bit set-group-ID on execution in their mode set. A local, unprivileged user on a system that has a GFS file system mounted...
Scientific Linux Security Update : GFS on SL3.x i386/x86_64
A flaw was found in the gfslock implementation. The GFS locking code could skip the lock operation for files that have the SISGID bit set-group-ID on execution in their mode set. A local, unprivileged user on a system that has a GFS file system mounted could use this flaw to cause a kernel panic...
Scientific Linux Security Update : GFS on SL3.x i386/x86_64
These updated GFS packages are in sync with the latest kernel 2.4.21-58.EL. The modules in earlier GFS packages fail to load because they do not match the running kernel. It is possible to force-load the modules; however, with this update, force-loading the modules is not required. %NASLMINLEVEL...
kernel security, bug fix, and enhancement update
2.6.32-131.12.1.el6 - netdrv be2net: clear intr bit in beprobe Ivan Vecera 726308 722596 2.6.32-131.11.1.el6 - mm hold the page lock until after setpagestablenode Andrea Arcangeli 726095 683658 - netdrv be2net: remove certain cmd failure logging Ivan Vecera 725329 719304 - net nl80211: missing...
rgmanager: multiple insecure temporary file use issues
Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink attacks on files in /tmp, involving unspecified components in Resource Group Manager aka rgmanager before 2.03.09-1, gfs2-utils before 2.03.09-1, and CMAN - The Cluster Manager before 2.03.09-1 on...
Mandriva Linux Security Advisory : lvm2 (MDVSA-2010:171)
A vulnerability has been found and corrected in lvm2 : The cluster logical volume manager daemon clvmd in lvm2-cluster in LVM2 before 2.02.72, as used in Red Hat Global File System GFS and other products, does not verify client credentials upon a socket connection, which allows local users to cau...