kernel: dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata

An ABBA deadlock flaw was found in the Linux kernel's device-mapper thin provisioning subsystem between the memory reclaim path and metadata abort handling. A local user can trigger this issue by initiating cache drop operations while dm-thin operations are active, causing process P1 to hold...

The vulnerability of the Security and Provisioning component of the Oracle Essbase database management system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Security and Provisioning component of the Oracle Essbase database management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

PT-2023-22483 · Genesys · Genesys Cic Polycom Phone Provisioning Tftp Server

Name of the Vulnerable Software and Affected Versions: Genesys CIC Polycom phone provisioning TFTP Server affected versions not specified Description: An issue was found that allows a remote attacker to execute arbitrary code via the login credentials to the TFTP server configuration page...

Genesys CIC Polycom phone provisioning TFTP Server 代码问题漏洞

The Genesys CIC Polycom phone provisioning TFTP Server is a server from Genesys Corporation, USA. A security vulnerability exists in the Genesys CIC Polycom phone provisioning TFTP Server that originates from a vulnerability that could allow a remote attacker to execute arbitrary code via login...

kernel: dm thin: Use last transaction's pmd->root when commit failed

A metadata handling flaw was found in the Linux kernel device-mapper thin provisioning driver. After a failed metadata commit, the in-memory root pointer could reference a mixed set of fresh and stale tree nodes. Subsequent lookups may loop or stall. A local user could use this flaw to cause the...

Moderate: butane security, bug fix, and enhancement update

Butane translates human-readable Butane Configs into machine-readable Ignition configs for provisioning operating systems that use Ignition. The following packages have been upgraded to a later upstream version: butane 0.16.0. BZ2135475 Security Fixes: golang: net/http: handle server errors after...

Unable to provision VPX on the SDX 9100/16000 SDX 16000 hardware

Unable to provision VPX on the SDX 9100/16000 hardware. Receive error while provisioning:Booting a02co1vdivpx001 Error: Citrix ADC is not reachable after reboot Operation Failed : Error: Citrix ADC is not reachable after reboot...

The vulnerability of the Security and Provisioning component of the Oracle Essbase database management system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Security and Provisioning component of the Oracle Essbase database management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2023-28742

When DNS is provisioned, an authenticated remote command execution vulnerability exists in DNS iQuery mesh. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

Citrix Provisioning Services - PVS Server 2303 Fails To Register With Citrix Cloud

While running the configuration wizard to register your PVS Server against Citrix Cloud you are greeted by an unexpected console error. "Error Registering Server, Sequence contains no matching element" as shown below: The PVS configwizard.log file will show you this exception:...

The vulnerability of the Security and Provisioning component of the Oracle Essbase database management system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Security and Provisioning component of the Oracle Essbase database management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2023-21943

Vulnerability in Oracle Essbase component: Security and Provisioning. The supported version that is affected is 21.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks require human interaction from a...

CVE-2023-21942

Vulnerability in Oracle Essbase component: Security and Provisioning. The supported version that is affected is 21.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks require human interaction from a...

Design/Logic Flaw

Vulnerability in Oracle Essbase component: Security and Provisioning. The supported version that is affected is 21.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks require human interaction from a...

CVE-2023-21944

CVE-2023-21944 affects Oracle Essbase (Security and Provisioning), with vulnerable version 21.4. An unauthenticated attacker can access via HTTP over the network; exploitation requires user interaction and can lead to unauthorized access to data. The issue is one of several in the Oracle Essbase ...

CVE-2023-21943

Oracle Essbase 21.4 (Security and Provisioning) is affected by CVE-2023-21943. The vulnerability allows an unauthenticated, network-accessible attacker (HTTP) to compromise Essbase, requiring user interaction and potentially leading to unauthorized access to sensitive data. CVSS v3.1 base score i...

CVE-2023-21942

CVE-2023-21942 affects Oracle Essbase (Security and Provisioning) with affected version 21.4. The vulnerability enables an unauthenticated attacker over the network (via HTTP) to compromise Essbase; exploitation requires user interaction from someone other than the attacker, and can lead to unaut...

Best practices regarding Azure Storage Keys, Azure Functions, and Azure Role Based Access

Summary Azure provides developers and security operations staff a wide array of configurable security options to meet organizational needs. Throughout the software development lifecycle, it is important for customers to understand the shared responsibility model, as well as be familiar with vario...

Important: Red Hat Security Advisory: Satellite 6.12.3 Async Security Update

Updated Satellite 6.12 packages that fixes important security bugs and several regular bugs are now available for Red Hat Satellite. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet...

Apache James 安全漏洞

Apache James is the United States Apache Apache Foundation of a completely written in Java open source Smtp and Pop3 mail transfer agent and Nntp news server . An elevation of privilege vulnerability exists in Apache James 3.7.3 and earlier versions, which stems from the default provisioning of J...