F5 Networks BIG-IP : BIG-IP vulnerability (K53620021)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.2.5 / 15.0.1.4 / 15.1.0.5 / 16.0.0. It is, therefore, affected by a vulnerability as referenced in the K53620021 advisory. - On versions 11.2.1. and greater, unrestricted Snapshot File Access allows BIG-IP system's us...

grafana: incorrect access control in snapshot HTTP API leads to denial of service

In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This makes it possible to run a denial of service attack against the server running Grafana...

RHEL 8 : grafana (RHSA-2020:1659)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1659 advisory. Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. The following packages have been upgrad...

SUSE SLES12 Security Update : python-cffi, python-cryptography (SUSE-SU-2020:0792-1)

This update for python-cffi, python-cryptography fixes the following issues : Security issue fixed : CVE-2018-10903: Fixed GCM tag forgery via truncated tag in finalizewithtag API bsc1101820. Non-security issues fixed : python-cffi was updated to 1.11.2 bsc1138748, jscECO-1256, jscPM-1598: fixed ...

Hyper-V Backup Job fails after 72 hours "Failed to call RPC function 'HvSetVmBackupStatus'"

Challenge A backup of a Hyper-V VM fails after 72 hours with the following error: Failed to call RPC function 'HvSetVmBackupStatus': Snapshot with id 'snapshot-uuid' was not found. In the Task log for the specific VM %programdata%\Veeam\Backup\ \Task...log the following error is found: Error The...

Fedora: Security Advisory for timeshift (FEDORA-2020-c18248f61a)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Nanometrics Centaur 4.3.23 - Unauthenticated Remote Memory Leak Exploit

Exploit for hardware platform in category web applications Exploit Title: Nanometrics Centaur 4.3.23 - Unauthenticated Remote Memory Leak Author: byteGoblin Vendor: https://www.nanometrics.ca Product: https://www.nanometrics.ca/products/accelerometers/titan-sma Product:...

CVE-2014-0147

Qemu before 1.6.2 block diver for the various disk image formats used by Bochs and for the QCOW version 2 format, are vulnerable to a possible crash caused by signed data types or a logic error while creating QCOW2 snapshots, which leads to incorrectly calling updaterefcount routine...

openSUSE Security Update : samba (openSUSE-2020-122)

This update for samba fixes the following issues : Security issues fixed : - CVE-2019-14907: Fixed a Server-side crash after charset conversion failure during NTLMSSP processing bsc1160888. - CVE-2019-14902: Fixed an issue where automatic replication of ACLs down subtree on AD Directory is not...

Security update for samba (moderate)

openSUSE Security Update: Security update for samba Announcement ID: openSUSE-SU-2020:0122-1 Rating: moderate References: 1141320 1160850 1160852 1160888 Cross-References: CVE-2019-14902 CVE-2019-14907 CVE-2019-19344 Affected Products: openSUSE Leap 15.1 An update that solves three vulnerabilitie...

OPENSUSE-SU-2020:0122-1 Security update for samba

This update for samba fixes the following issues: Security issues fixed: - CVE-2019-14907: Fixed a Server-side crash after charset conversion failure during NTLMSSP processing bsc1160888. - CVE-2019-14902: Fixed an issue where automatic replication of ACLs down subtree on AD Directory is not...

SUSE SLED15 / SLES15 Security Update : samba (SUSE-SU-2020:0223-1)

This update for samba fixes the following issues : Security issues fixed : CVE-2019-14907: Fixed a Server-side crash after charset conversion failure during NTLMSSP processing bsc1160888. CVE-2019-14902: Fixed an issue where automatic replication of ACLs down subtree on AD Directory is not workin...

SUSE-SU-2020:0223-1 Security update for samba

This update for samba fixes the following issues: Security issues fixed: - CVE-2019-14907: Fixed a Server-side crash after charset conversion failure during NTLMSSP processing bsc1160888. - CVE-2019-14902: Fixed an issue where automatic replication of ACLs down subtree on AD Directory is not...

Upgrading your Citrix Hypervisor Windows I/O drivers to the latest major version (9.x)

You can update your Windows VMs to the latest major version of the Windows I/O drivers quickly and easily by using Windows Updates, Management Agent updates, or by installing from the latest managementagentXX.msifile available at CTX235403. These latest version of the drivers, whose version numbe...

ESXi firewall changes required to process a Veeam backup from storage snapshot with Cisco HyperFlex IOvisor

Challenge To process a Veeam backup from storage snapshot with Cisco HyperFlex IOvisor, adjustments may have to be to the ESXi firewall settings. The process outlined below applies to all HyperFlex clusters running HX Data Platform 3.0 or later. Solution Before you add the HyperFlex Cluster into...

PT-2019-5246 · Graphicsmagick +3 · Graphicsmagick +3

Name of the Vulnerable Software and Affected Versions: GraphicsMagick versions 1.4 snapshot-20190423 Q8 Description: The issue is related to a heap-based buffer overflow in the ImportRLEPixels function, which can be exploited by a remote attacker to gain unauthorized access to information,...

macOS 10.14.6 (18G87) - Kernel Use-After-Free due to Race Condition in wait_for_namespace_event()

The XNU function waitfornamespaceevent in bsd/vfs/vfssyscalls.c releases a file descriptor for use by userspace but may then subsequently destroy that file descriptor using fpfree, which unconditionally frees the fileproc and fileglob. This opens up a race window during which the process could...

RHEL 7 : OpenShift Container Platform 3.11 openshift-external-storage (RHSA-2019:4054)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:4054 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud...

macOS 10.14.6 (18G87) - Kernel Use-After-Free due to Race Condition in wait_for_namespace_event()

macOS 10.14.6 18G87 - Kernel Use-After-Free due to Race Condition in waitfornamespaceevent The XNU function waitfornamespaceevent in bsd/vfs/vfssyscalls.c releases a file descriptor for use by userspace but may then subsequently destroy that file descriptor using fpfree, which unconditionally fre...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.1 openshift-external-storage security update

An update for openshift-external-storage is now available for Red Hat OpenShift Container Platform 4.1. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...