CVE-2022-48793

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: nSVM: fix potential NULL derefernce on nested migration Turns out that due to review feedback and/or rebases I accidentally moved the call to nestedsvmloadcr3 to be too early, before the NPT is enabled, which is very...

CVE-2022-48793 KVM: x86: nSVM: fix potential NULL derefernce on nested migration

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: nSVM: fix potential NULL derefernce on nested migration Turns out that due to review feedback and/or rebases I accidentally moved the call to nestedsvmloadcr3 to be too early, before the NPT is enabled, which is very...

CVE-2022-48793 KVM: x86: nSVM: fix potential NULL derefernce on nested migration

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: nSVM: fix potential NULL derefernce on nested migration Turns out that due to review feedback and/or rebases I accidentally moved the call to nestedsvmloadcr3 to be too early, before the NPT is enabled, which is very...

CVE-2022-48793 KVM: x86: nSVM: fix potential NULL derefernce on nested migration

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: nSVM: fix potential NULL derefernce on nested migration Turns out that due to review feedback and/or rebases I accidentally moved the call to nestedsvmloadcr3 to be too early, before the NPT is enabled, which is very...

PT-2024-36574 · Github · Github Enterprise Server

Name of the Vulnerable Software and Affected Versions: GitHub Enterprise Server versions prior to 3.14 Description: An improper privilege management issue allowed users to migrate private repositories without having the appropriate scopes defined on the related Personal Access Token...

CVE-2022-48793: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: nSVM: fix potential NULL derefernce on nested migration Turns out that due to review feedback and/or rebases I accidentally moved the call to nestedsvmloadcr3 to be too early, before the NPT is enabled, which is very...

folio-migration-tools (>=1.0.2, <=1.5.0), lore (0.5.13) +1 more potentially affected by CVE-2024-6345 via setuptools (60.6.0)

setuptools PYPI version 60.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - folio-migration-tools =1.0.2, =1.10.0, =1.11.17 Source cves: CVE-2024-6345 Source advisory: OSV:GHSA-CX63-2MW6-8HW5...

virt:kvm_utils3 bug fix update

hivex libguestfs libguestfs-winsupport libiscsi libnbd libtpms libvirt 9.0.0-5.el8 - Fix off-by-one error in udevListInterfacesByStatus Martin Kletzander Orabug: 36364464 CVE-2024-1441 libvirt-dbus libvirt-python nbdkit netcf perl-Sys-Virt qemu-kvm 7.2.0-13 - vfio/migration: Enhance VFIO migratio...

Citrix Virtual Apps and Desktop - Upgrading, Installing and Migration issues

Introduction This article is a summary of the top support articles related to updating, install and migration of Citrix environments including Controllers and VDA. The most commonly used support articles and guides are below. There are three main areas covered in this summary including Controller...

Citrix Endpoint Management: Database issues

Introduction Citrix offers a series of articles dedicated to troubleshooting various database issues, such as connectivity problems, performance bottlenecks, and data corruption. By enabling quick diagnosis and resolution, these articles help minimize downtime and enhance the reliability and...

FAQ for XenMobile 10 Migration Tool

This article provides information on frequently asked questions and answers for XenMobile 10 MDM migration tool. Contents Q: What XenMobile editions are supported with the migration tool? Q: What versions of XenMobile are supported with the migration tool? Q: Where is the XenMobile 10 migration...

Unable to Connect to High Availability Enabled XenSever Pool and All Servers in Pool are in Emergency Mode

This article provides resolution to connectivity issues to the pool in XenCenter. Following are some of the issues that you might experience: Cannot connect to the pool in XenCenter Cannot start or migrate the virtual machines, although the virtual machines are active and running. All the servers...

ROS-20240709-03

Apache Kafka Message Manager vulnerability is related to Apache Kafka cluster migration from ZooKeeper mode to KRaft mode. Exploitation of the vulnerability could allow an attacker acting remotely, impact the confidentiality and integrity of...

Expedition initSetup_v2.0.sh Privilege Escalation

The vulnerability of the initSetupv2.0.sh file, a configuration migration tool for Expedition, lies in the use of hard-coded credentials. Exploiting this vulnerability could allow an attacker to gain increased privileges remotely...

Important: Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.7.16 security and bug fix update

The Migration Toolkit for Containers MTC 1.7.16 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

Palo Alto Networks Patches Critical Flaw in Expedition Migration Tool

Palo Alto Networks has released security updates to address five security flaws impacting its products, including a critical bug that could lead to an authentication bypass. Cataloged as CVE-2024-5910 CVSS score: 9.3, the vulnerability has been described as a case of missing authentication in its...

CVE-2024-6397: Authentication Bypass Using an Alternate Path or Channel

The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 0.1.0.44. This is due to insufficient verification of the API key. This makes it possible for unauthenticated attackers to log in as any existing...

CVE-2024-5910

Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition. Note: Expedition is a tool aiding in configuration migration, tuning, and enrichment. Configuration secrets, credential...

CVE-2024-5910 Expedition: Missing Authentication Leads to Admin Account Takeover

Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition. Note: Expedition is a tool aiding in configuration migration, tuning, and enrichment. Configuration secrets, credential...

CVE-2024-5910

CVE-2024-5910 affects Palo Alto Networks Expedition (versions prior to 1.2.92). The issue is missing authentication for a critical function, enabling an attacker with network access to potentially takeover an Expedition admin account and exfiltrate configuration secrets and credentials. Public so...