CVE-2014-0592: Undefined Security Weakness

Barclamp aka barclamp-network 1.7 for the Crowbar Framework, as used in SUSE Cloud 3, does not enable netfilter on bridges when creating new instances, which allows remote attackers to bypass security group restrictions via unspecified vectors, related to floating IPs...

PT-2014-3696

Name of the Vulnerable Software and Affected Versions Barclamp aka barclamp-network version 1.7 Description The issue allows remote attackers to bypass security group restrictions via unspecified vectors, related to floating IPs, because netfilter is not enabled on bridges when creating new...

SUSE云安全组处理安全绕过漏洞

Bugtraq ID:66519 CVE ID:CVE-2014-0592 SUSE Cloud帮助部署和管理企业适用的云基础设施。 SUSE Cloud crowbar-barclamp-network处理安全组存在漏洞，可导致新实例不能正确的被防火墙保护，可被未授权访问。 0 SUSE Cloud 3 目前厂商已经发布了升级补丁以修复漏洞，请下载使用： http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00025.html...

Design/Logic Flaw

The XenAPI backend in OpenStack Compute Nova Folsom, Grizzly, and Havana before 2013.2 does not properly apply security groups 1 when resizing an image or 2 during live migration, which allows remote attackers to bypass intended restrictions...

CVE-2013-4497: Undefined Security Weakness

The XenAPI backend in OpenStack Compute Nova Folsom, Grizzly, and Havana before 2013.2 does not properly apply security groups 1 when resizing an image or 2 during live migration, which allows remote attackers to bypass intended restrictions...

New home for the Security Group blog

News New home for the Security Group blog Share October 31st, 2013 Welcome to the new home of the Opera Security Group. We have changed our blogging platform. For more more information regarding the switch, please see this post. If you received this blog post in your feed reader, you do not need ...

CVE-2013-4185

Algorithmic complexity vulnerability in OpenStack Compute Nova before 2013.1.3 and Havana before havana-3 does not properly handle network source security group policy updates, which allows remote authenticated users to cause a denial of service nova-network consumption via a large number of...

DEBIAN-CVE-2013-4185

Algorithmic complexity vulnerability in OpenStack Compute Nova before 2013.1.3 and Havana before havana-3 does not properly handle network source security group policy updates, which allows remote authenticated users to cause a denial of service nova-network consumption via a large number of...

CVE-2013-4185

Algorithmic complexity vulnerability in OpenStack Compute Nova before 2013.1.3 and Havana before havana-3 does not properly handle network source security group policy updates, which allows remote authenticated users to cause a denial of service nova-network consumption via a large number of...

CVE-2013-4185

Algorithmic complexity vulnerability in OpenStack Compute Nova before 2013.1.3 and Havana before havana-3 does not properly handle network source security group policy updates, which allows remote authenticated users to cause a denial of service nova-network consumption via a large number of...

CVE-2013-4185

Algorithmic complexity vulnerability in OpenStack Compute Nova before 2013.1.3 and Havana before havana-3 does not properly handle network source security group policy updates, which allows remote authenticated users to cause a denial of service nova-network consumption via a large number of...

PT-2013-4892

Name of the Vulnerable Software and Affected Versions OpenStack Compute Nova versions before 2013.1.3 OpenStack Compute Nova Havana versions before havana-3 Description The issue does not properly handle network source security group policy updates, allowing remote authenticated users to cause a...

Ubuntu: Security Advisory (USN-2000-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 12.04 LTS / 12.10 / 13.04 : nova vulnerabilities (USN-2000-1)

It was discovered that Nova did not properly enforce the ispublic property when determining flavor access. An authenticated attacker could exploit this to obtain sensitive information in private flavors. This issue only affected Ubuntu 12.10 and 13.10. CVE-2013-2256, CVE-2013-4278 Grant Murphy...

CVE-2013-4179

The security group extension in OpenStack Compute Nova Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service resource consumption and crash via an XML Entity Expansion XEE attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664...

CVE-2013-4179: Improper Restriction of Operations within the Bounds of a Memory Buffer

The security group extension in OpenStack Compute Nova Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service resource consumption and crash via an XML Entity Expansion XEE attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664...

CVE-2013-4185

Algorithmic complexity vulnerability in OpenStack Compute Nova before 2013.1.3 and Havana before havana-3 does not properly handle network source security group policy updates, which allows remote authenticated users to cause a denial of service nova-network consumption via a large number of...

First Large Cyber Espionage Activity against Pakistan Emanating From India

Cyber Security researchers have discovered a family of information stealing malware targeting Pakistan that originates out of India. Norman Shark, the global security leader in malware analysis solutions for enterprises, service providers and government, today released a report detailing a large...

First Large Cyber Espionage Activity against Pakistan Emanating From India

Cyber Security researchers have discovered a family of information stealing malware targeting Pakistan that originates out of India. Norman Shark, the global security leader in malware analysis solutions for enterprises, service providers and government, today released a report detailing a large...

Scheduled automatic dashboard delivery fails

Challenge In certaing scenarios, scheduled dashboard delivery in Veeam ONE Reporter fails and reports the 'Dashboard Capturing Failed' error in the reporting task session log. Cause This issue is usually related to the configured permissions of the Veeam ONE Service account, which makes the...