CVE-2025-62877

Projects using the SUSE Virtualization Harvester environment may expose the OS default ssh login password if they are using the 1.5.x or 1.6.x interactive installer to either create a new cluster or add new hosts to an existing cluster. The environment is not affected if the PXE boot mechanism is...

CVE-2025-62877

CVE-2025-62877 affects SUSE Virtualization (Harvester) where the interactive installer on Harvester 1.5.x–1.6.x may expose the OS default SSH password when creating a new cluster or adding hosts. The issue does not occur when PXE boot with the Harvester configuration is used. Affected component i...

CVE-2025-62877 Harvest may expose OS default ssh login password via SUSE Virtualization Interactive Installer

Projects using the SUSE Virtualization Harvester environment may expose the OS default ssh login password if they are using the 1.5.x or 1.6.x interactive installer to either create a new cluster or add new hosts to an existing cluster. The environment is not affected if the PXE boot mechanism is...

EUVD-2020-24555

Malware in sbrugna...

PVS UEFI targets fail to boot when downloading TFTP bootstrap

The customer was migrating from PVS BIOS based target devices to PVS UEFI based target devices. BIOS based target devices were deprecated in PVS 2203, and all customers should be migrating to UEFI based target devices. The customer was using VMware based target devices, and was reconfiguring targ...

Security update for ovmf

This update for ovmf fixes the following issues: PXE boot is failing due to patches applied to fix CVE-2023-45236 and CVE-2023-45237 bsc1237084. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively yo...

SUSE-SU-2025:0690-1 Security update for ovmf

This update for ovmf fixes the following issues: - PXE boot is failing due to patches applied to fix CVE-2023-45236 and CVE-2023-45237 bsc1237084...

SUSE SLES15 / openSUSE 15 Security Update : ovmf (SUSE-SU-2025:0608-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0608-1 advisory. - PXE boot is failing due to patches applied to fix CVE-2023-45236 and CVE-2023-45237 bsc1237084. Tenable has extract...

SUSE SLES15 Security Update : ovmf (SUSE-SU-2025:0609-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0609-1 advisory. - PXE boot is failing due to patches applied to fix CVE-2023-45236 and CVE-2023-45237 bsc1237084. Tenable has extracted the precedi...

SUSE-SU-2025:0609-1 Security update for ovmf

This update for ovmf fixes the following issues: - PXE boot is failing due to patches applied to fix CVE-2023-45236 and CVE-2023-45237 bsc1237084...

Security update for ovmf

This update for ovmf fixes the following issues: PXE boot is failing due to patches applied to fix CVE-2023-45236 and CVE-2023-45237 bsc1237084. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively yo...

SUSE-SU-2025:0608-1 Security update for ovmf

This update for ovmf fixes the following issues: - PXE boot is failing due to patches applied to fix CVE-2023-45236 and CVE-2023-45237 bsc1237084...

Error: "vDisk is not available. Please check your network PXE boot configuration and restart Imaging Wizard" or "Red X" on Provisioning Server

After installing the Target Device Software and rebooting the following symptoms can be seen: A Red X is displayed on top of the vDisk Status Applet in the Tray Bar After running the Imaging Wizard and rebooting the following message is shown:"vDisk is not available. Please check your network PXE...

vDisk Inactive State with Broadcom Network Cards

After installing Citrix Provisioning Services Server Target Device Software on a client computer that has a Broadcom Network Interface Card and restarting the target device, the Provisioning Services PVS status in the system tray displays Inactive. After initially installing the Target Device...

How to Configure WDS to PXE Boot Veeam Agent for Microsoft Windows Recovery Media

Purpose This article documents a method to configure Windows Deployment Services WDS to PXE boot the Veeam Agent for Microsoft Windows Recovery Media over a network. Solution General Guidance Disclaimer The information provided below is intended only as general guidance. The method and...

CVE-2023-45231

EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing Neighbor Discovery Redirect message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality...

CVE-2023-45229

EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing the IANA or IATA option in a DHCPv6 Advertise message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality...

CVE-2023-45232

EDK2's Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Availability...

Vulnerabilities in EDK2 NetworkPkg IP stack implementation.

Overview Multiple vulnerabilities were discovered in the TCP/IP stack NetworkPkg of Tianocore EDKII, an open source implementation of Unified Extensible Firmware Interface UEFI. Researchers at Quarkslab have identified a total of 9 vulnerabilities that if exploited via network can lead to remote...

SUSE-SU-2023:3861-1 Security update for SUSE Manager Server 4.3

This update fixes the following issues: billing-data-service: - Version 0.3-1 Add required dependencies to package and service Change billing api datastructure Require csp-billing-adapter service cobbler: - Fix EFI PXE boot regression bsc1214124 - Fix isolinux.cfg generation in 'cobbler buildiso'...