Photon OS 3.0: Strongswan PHSA-2023-3.0-0694

An update of the strongswan package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-3.0-0694. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2023-34048

vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger an out-of-bounds write potentially leading to remote code execution. Recent assessments: ccondon-r7 at January 19, 2024...

VMware Releases Security Update for Tools

VMware has released a security update to address a vulnerability in VMware Tools. A cyber threat actor can exploit this vulnerability to obtain sensitive information. CISA encourages users and administrators to review VMware Security Advisory VMSA-2023-0019link is external and apply the necessary...

VMware Releases Security Updates for Aria Operations for Networks

VMware has released security updates to address multiple vulnerabilities in Aria Operations for Networks. A cyber threat actor can exploit one of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review VMware Security Advisory...

BlackBasta is the latest ransomware to target ESXi virtual machines on Linux

BlackBasta, an alleged subdivision of the ransomware group Conti, just began supporting the encryption of VMwares ESXi virtual machines VM installed on enterprise Linux servers. Because more and more organizations have begun using VMs for cost-effectiveness and easier management of devices, this...

PT-2022-6838 · Vmware +6 · Vmxnet3 +6

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: A use-after-free flaw was found in the vmxnet3 rq alloc rx buf function in the drivers/net/vmxnet3/vmxnet3 drv.c file of VMware's vmxnet3 ethernet NIC driver in the Linux Kernel. This...

Women in Security Part 6: Meet Nandini De, Director of Engineering

This post is part of our Women’s History Month series - follow along with us on Twitter @VMwareCarbonBlack To conclude Women’s History Month, we are thrilled to bring you the last spotlight of our Women in Security series. It’s been an honor to highlight the outstanding women in the VMware Securi...

Women in Security Part 4: Meet Jan Lawford, Senior Director of EMEA Security Sales

This post is part of our Women’s History Month series - follow along with us on Twitter @VMwareCarbonBlack As we continue to celebrate Women’s History Month, we are honored to share the stories of women in our VMware Security Business Unit, including members of our team and customers alike. By...

Photon OS 3.0: Linux PHSA-2020-3.0-0153

An update of the linux package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0153. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid141496;...

Photon OS 2.0: Linux PHSA-2020-2.0-0287

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0287. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid141098...

Photon OS 2.0: Linux PHSA-2020-2.0-0283

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0283. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid140709...

Photon OS 3.0: Linux PHSA-2020-3.0-0073

An update of the linux package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0073. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid135403;...

Photon OS 2.0: Linux PHSA-2018-2.0-0088

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0088. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121989...

Photon OS 2.0: Linux PHSA-2017-0050

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0050. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121770;...

Photon OS 1.0: Linux PHSA-2018-1.0-0135 (deprecated)

An update of 'linux', 'linux-esx' packages of Photon OS has been released. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2/7/2019 The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-1.0-0135. The text itself is copyright C...

VMware Releases Security Updates

VMware has released security updates to address a vulnerability in Horizon 6, 7, and Horizon Client for Windows. An attacker could exploit this vulnerability to obtain sensitive information. NCCIC encourages users and administrators to review the VMware Security Advisory VMSA-2018-0019 and apply...

VMware ESXi Guest RPC Null Pointer Dereference Vulnerability (VMSA-2017-0015)

VMware ESXi is prone to a NULL pointer dereference vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VMware Releases Security Updates

VMware has released security updates to address vulnerabilities in VMware vRealize Automation and vRealize Business Advanced and Enterprise. Exploitation of these vulnerabilities may allow a remote attacker to take control of an affected system. Users and administrators are encouraged to review...

CVE-2015-3191 - CSRF attack on change email | Cloud Foundry

CVE-2015-3191 – CSRF attack on change email Low Vendor Cloud Foundry Foundation Versions Affected cf-release versions prior to v210 UAA versions prior to 2.3.0 Description The changeemail form in UAA is vulnerable to a CSRF attack. This allows an attacker to trigger an e-mail change for a user...

CVE-2015-3189 - Expire old reset password links | Cloud Foundry

CVE-2015-3189 – Expire old reset password links Low Vendor Cloud Foundry Foundation Versions Affected cf-release versions prior to v209 UAA versions prior to 2.2.6 Description Old Password Reset Links are not expired after the user changes their current email address to a new one. This...