Netscaler High Availability issues

Introduction This article provides a list of Knowledge Base resources on how to investigate, troubleshoot, and prevent the most common issues with Netscaler High Availability HA. Overview of the Issue NetScaler High Availability HA offers seamless failover capabilities to maintain uninterrupted...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates in the mips:bmips:BCM6358 component that could cause the kernel to crash when calling archsyncdmaforcpuall...

SUSE CVE-2024-39493

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - Fix ADFDEVRESETSYNC memory leak Using completiondone to determine whether the caller has gone away only works after a complete call. Furthermore it's still possible that the caller has not yet called...

UBUNTU-CVE-2024-39493

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - Fix ADFDEVRESETSYNC memory leak Using completiondone to determine whether the caller has gone away only works after a complete call. Furthermore it's still possible that the caller has not yet called...

SUSE CVE-2024-36138

Bypass incomplete fix of CVE-2024-27980, that arises from improper handling of batch files with all possible extensions on Windows via childprocess.spawn / childprocess.spawnSync. A malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option i...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a memory leak in ADFDEVRESETSYNC...

Azure File Sync Agent v18.2 Release – July 2024 (KB5023059)

Update Rollup for Azure File Sync agent version 18.2.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v18.2 Release – July 2024 (KB5023059)

Update Rollup for Azure File Sync agent version 18.2.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v18.2 Release – July 2024 (KB5023059)

Update Rollup for Azure File Sync agent version 18.2.0.0. For more details, see the associated Microsoft Knowledge Base article...

Improper Control of Generation of Code ('Code Injection')

Overview Affected versions of this package are vulnerable to Improper Control of Generation of Code 'Code Injection'. This is due to a bypass of CVE-2024-27980. A malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled. Note...

Azure File Sync Agent v18.2 Release – July 2024

Azure File Sync Agent v18.2 Release – July 2024 This article describes the improvements and issues that are fixed in the Azure File Sync Agent v18.2 release that is dated July 2024. Additionally, this article contains installation instructions for this release. Improvements and issues that are...

USN-6881-1 exim4 vulnerability

It was discovered that Exim did not enforce STARTTLS sync point on client side. An attacker could possibly use this issue to perform response injection during MTA SMTP sending...

CVE-2024-3995 Command Injection in Helix ALM

In Helix ALM versions prior to 2024.2.0, a local command injection was identified. Reported by Bryan Riggins...

CVE-2024-39669

In the Console in Soffid IAM before 3.5.39, necessary checks were not applied to some Java objects. A malicious agent could possibly execute arbitrary code in the Sync Server and compromise security...

CVE-2024-39669

In the Console in Soffid IAM before 3.5.39, necessary checks were not applied to some Java objects. A malicious agent could possibly execute arbitrary code in the Sync Server and compromise security...

The vulnerability of the Microsoft Azure File Sync data synchronization service lies in the improper handling of symbolic links before accessing files. This allows attackers to circumvent existing security restrictions and enhance their privileges.

The vulnerability of the Microsoft Azure File Sync data synchronization service is related to the incorrect definition of symbolic links before accessing a file. Exploiting this vulnerability can allow an attacker to circumvent existing security restrictions and enhance their privileges...

AZL-67446 CVE-2024-37354 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix crash on racing fsync and size-extending write into prealloc We have been seeing crashes on duplicate keys in btrfssetitemkeysafe: BTRFS critical device vdb: slot 4 key 450 108 8192 new key 450 108 8192 ------------ cu...

Malicious code in use-sync-external-store-shim (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in sync-dsc (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3075 Malicious code in sync-dsc (npm)

--- -= Per source details. Do not edit below this line.=-...