OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints

Affects- Nova: =18.0.0 =32.0.0 =33.0.0 33.0.2 DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling...

EUVD-2021-13190

Malware in sbrugna...

EUVD-2021-13135

Malware in sbrugna...

EUVD-2021-13136

Malware in sbrugna...

SUSE CVE-2021-26329

AMD System Management Unit SMU may experience an integer overflow when an invalid length is provided which may result in a potential loss of resources...

SUSE CVE-2021-26330

AMD System Management Unit SMU may experience a heap-based overflow which may result in a loss of resources...

CVE-2021-26384

A malformed SMI System Management Interface command may allow an attacker to establish a corrupted SMI Trigger Info data structure, potentially leading to out-of-bounds memory reads and writes when triggering an SMI resulting in a potential loss of resources...

CVE-2021-26384

A malformed SMI System Management Interface command may allow an attacker to establish a corrupted SMI Trigger Info data structure, potentially leading to out-of-bounds memory reads and writes when triggering an SMI resulting in a potential loss of resources...

CVE-2021-26384

A malformed SMI System Management Interface command may allow an attacker to establish a corrupted SMI Trigger Info data structure, potentially leading to out-of-bounds memory reads and writes when triggering an SMI resulting in a potential loss of resources...

PT-2022-9751 · Amd · Athlon™ Series +33

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned Description: A malformed SMI command may allow an attacker to establish a corrupted SMI Trigger Info data structure, potentially leading to out-of-bounds memory reads and writes when triggering an SM...

CVE-2021-26384

A malformed SMI System Management Interface command may allow an attacker to establish a corrupted SMI Trigger Info data structure, potentially leading to out-of-bounds memory reads and writes when triggering an SMI resulting in a potential loss of resources...

CVE-2021-26330

AMD System Management Unit SMU may experience a heap-based overflow which may result in a loss of resources...

CVE-2021-26330

AMD System Management Unit SMU may experience a heap-based overflow which may result in a loss of resources...

CVE-2021-26330

AMD System Management Unit SMU may experience a heap-based overflow which may result in a loss of resources...

CVE-2021-26330

CVE-2021-26330 describes a heap-based overflow in the AMD System Management Unit (SMU) that may result in resource loss. Connected sources confirm affected hardware as AMD EPYC generations (1st/2nd/3rd Gen) and associate the issue with SMU/ASP components. The AMD Bulletin AMD-SB-1021 provides mit...

CVE-2021-26329

AMD System Management Unit SMU may experience an integer overflow when an invalid length is provided which may result in a potential loss of resources...

CVE-2021-26329

AMD System Management Unit SMU may experience an integer overflow when an invalid length is provided which may result in a potential loss of resources...

CVE-2021-26329

CVE-2021-26329 affects the AMD System Management Unit (SMU). The available documents confirm an integer overflow when an invalid length is provided, potentially causing resource loss. The issue is listed for multiple AMD EPYC generations (1st/2nd/3rd Gen) in AMD’s SB-1021 bulletin. Mitigations in...

CVE-2021-26329: Improper Handling of Length Parameter Inconsistency

AMD System Management Unit SMU may experience an integer overflow when an invalid length is provided which may result in a potential loss of resources...

CVE-2021-26330

AMD System Management Unit SMU may experience a heap-based overflow which may result in a loss of resources...