1037 matches found
CVE-2024-20366
CVE-2024-20366 involves Cisco Crosswork Network Services Orchestrator (NSO) and its Tail-f HCC function pack. A local, authenticated attacker can elevate privileges to root due to a user-controlled search path used to locate executables, enabling execution of a malicious file with root privileges...
Cisco Crosswork Network Services Orchestrator Privilege Escalation Vulnerability
A vulnerability in the Tail-f High Availability Cluster Communications HCC function pack of Cisco Crosswork Network Services Orchestrator NSO could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerability exists because a user-controlled searc...
PT-2024-3640 · Cisco · Cisco Crosswork Network Services Orchestrator
Name of the Vulnerable Software and Affected Versions: Cisco Crosswork Network Services Orchestrator NSO affected versions not specified Description: A vulnerability in the Tail-f High Availability Cluster Communications HCC function pack could allow an authenticated, local attacker to elevate...
PT-2024-25053 · Sap · Application Server
Name of the Vulnerable Software and Affected Versions: SAP Replication Server affected versions not specified Description: The issue allows an attacker to execute certain commands through a gateway to RSSD, potentially causing the Replication Server to crash due to memory corruption. This has a...
DELL ECS Connection Manager 安全漏洞
DELL ECS Connection Manager is a software from Dell USA for managing enterprise cloud storage. A security vulnerability exists in DELL ECS Connection Manager that originates from allowing an unauthenticated attacker to access computers on the same network in an HA or cluster group via an IP...
PT-2024-26505 · Kemp · Kemp Loadmaster
Name of the Vulnerable Software and Affected Versions: Kemp LoadMaster affected versions not specified Description: Unauthenticated attackers can perform actions using SSH private keys by knowing the IP address and having access to the same network of one of the machines in the HA or Cluster grou...
JFrog Artifactory 输入验证错误漏洞
JFrog Artifactory is an open source, general-purpose Artifact repository manager from Israel's JFrog that supports clustered and high-availability Docker registries and provides an end-to-end solution for automating artifacts for tracking from development to production. JFrog Artifactory has an...
kernel: Linux kernel HSR driver: Denial of Service via uninitialized value access
A flaw was found in the High-availability Seamless Redundancy HSR driver within the Linux kernel. A local user can trigger this vulnerability by sending specific Virtual Local Area Network VLAN packets to an HSR interface. This can lead to an uninitialized value being accessed, causing a Denial o...
DEBIAN-CVE-2024-26863
In the Linux kernel, the following vulnerability has been resolved: hsr: Fix uninit-value access in hsrgetnode KMSAN reported the following uninit-value access issue 1: ===================================================== BUG: KMSAN: uninit-value in hsrgetnode+0xa2e/0xa40 net/hsr/hsrframereg.c:2...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the fact that hsrgetskbsequencenr reads an invalid value as the sequence number if the packet type ID field ...
SUSE CVE-2024-26707
In the Linux kernel, the following vulnerability has been resolved: net: hsr: remove WARNONCE in sendhsrsupervisionframe Syzkaller reported 1 hitting a warning after failing to allocate resources for skb in hsrinitskb. Since a WARNONCE call will not help much in this case, it might be prudent to...
UBUNTU-CVE-2024-26707
In the Linux kernel, the following vulnerability has been resolved: net: hsr: remove WARNONCE in sendhsrsupervisionframe Syzkaller reported 1 hitting a warning after failing to allocate resources for skb in hsrinitskb. Since a WARNONCE call will not help much in this case, it might be prudent to...
Best Practices for Kafka Management to Ensure High Availability
By Uzair Amir With the increasing popularity of Apache Kafka as a distributed streaming platform, ensuring its high availability has become… This is a post from HackRead.com Read the original post: Best Practices for Kafka Management to Ensure High Availability...
ovn: insufficient validation of BFD packets may lead to denial of service
A flaw was found in the Open Virtual Network OVN. In OVN clusters where BFD is used between hypervisors for high availability, an attacker can inject specially crafted BFD packets from inside unprivileged workloads, including virtual machines or containers, that can trigger a denial of service...
ovn: insufficient validation of BFD packets may lead to denial of service
A flaw was found in the Open Virtual Network OVN. In OVN clusters where BFD is used between hypervisors for high availability, an attacker can inject specially crafted BFD packets from inside unprivileged workloads, including virtual machines or containers, that can trigger a denial of service...
ovn: insufficient validation of BFD packets may lead to denial of service
A flaw was found in the Open Virtual Network OVN. In OVN clusters where BFD is used between hypervisors for high availability, an attacker can inject specially crafted BFD packets from inside unprivileged workloads, including virtual machines or containers, that can trigger a denial of service...
ovn: insufficient validation of BFD packets may lead to denial of service
A flaw was found in the Open Virtual Network OVN. In OVN clusters where BFD is used between hypervisors for high availability, an attacker can inject specially crafted BFD packets from inside unprivileged workloads, including virtual machines or containers, that can trigger a denial of service...
RHEL 8 : ovn22.12 (RHSA-2024:1386)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1386 advisory. OVN, the Open Virtual Network, is a system to support virtual network abstraction. OVN complements the existing capabilities of OVS to add native...
RHEL 9 : ovn23.06 (RHSA-2024:1391)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1391 advisory. OVN, the Open Virtual Network, is a system to support virtual network abstraction. OVN complements the existing capabilities of OVS to add native...
The vulnerability of the FortiAuthenticator HA component in FortiOS operating systems allows attackers to increase their privileges.
The vulnerability of the FortiAuthenticator HA component in FortiOS operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...