Important: Red Hat Bug Fix Advisory: LVMS 4.13.6 Bug Fix Update

Updated container images that fix multiple bugs are now available for LVMS 4.13 Logical Volume Manager Storage uses lvm2 through the TopoLVM CSI driver to dynamically provision thin and thick local storage on a cluster with limited resources. Users of LVMS are advised to upgrade to the latest...

PT-2024-41375 · Astra Linux +4 · Astra Linux Special Edition +5

Уязвимость функции dm internal suspend модуля drivers/md/dm.c - драйвера поддержки нескольких устройств RAID и LVM ядра операционной системы Linux связана с неправильным контролем идентификаторов ресурсов «внедрение ресурсов». Эксплуатация уязвимости может позволить нарушителю, действующему...

Important: Red Hat Bug Fix Advisory: LVMS 4.13.z Bug Fix and Enhancement update

Updated container images that fix multiple bugs are now available for LVMS 4.13.z. Logical volume manager storage LVMS uses the TopoLVM CSI driver to dynamically provision local storage on single node OpenShift clusters. Logical volume manager storage creates thin-provisioned volumes using the...

Android OS Privilege Escalation Vulnerability

The vold volume manager daemon in Android kernel trusts messages from a PFNETLINK socket, which allows an attacker to execute code and gain root privileges. This vulnerability is associated with GingerBreak and Exploit.AndroidOS.Lotoor...

A Logical Volume Manager / LVM primer for Linux

About LVM LVM is an abstraction layer that provides block devices same kind of disk partitions. This is done by using 3 layers: physical volumes PV - disk partitions; volume groups VG - aggregates of physical volumes, could be across multiple disks or multiple partitions, whatever; logical volume...

Denial Of Service (DoS)

lvm2-cluster is vulnerable to denial of service. It was discovered that the cluster logical volume manager daemon clvmd did not verify the credentials of clients connecting to its control UNIX abstract socket, allowing local, unprivileged users to send control commands that were intended to only ...

PT-2020-20414 · Linux · Lvm2

Name of the Vulnerable Software and Affected Versions: LVM2 version 2.02 Description: The issue is related to memory mismanagement in the vg lookup function in daemons/lvmetad/lvmetad-core.c, leading to a memory leak in lvmetad. This can be demonstrated by running the pvs command. Recommendations...

CVE-2018-16664

An issue was discovered in Contiki-NG through 4.1. There is a buffer overflow in lvmsettype in os/storage/antelope/lvm.c while parsing AQL lvmsetop, lvmsetrelation, lvmsetoperand...

The vulnerability of the LVM system for managing logical volumes in the AIX operating system allows a hacker to gain root privileges.

The vulnerability of the LVM Logical Volume Manager system in the AIX operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating locally, to gain root privileges using the lquerylv command...

Microsoft Volume Manager Extension Driver Local Information Disclosure Vulnerability

Microsoft Windows is the popular operating system. A security vulnerability in the implementation of the Microsoft Windows Volume Manager Extension Driver allows attackers to exploit the vulnerability by submitting a special request, which can be used to obtain sensitive information...

Microsoft Windows Volume Manager Extension Driver Information Disclosure Vulnerability (KB4034744)

This host is missing an important security update according to Microsoft KB4034744 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Windows Multiple Vulnerabilities (KB4034672)

This host is missing a critical security update according to Microsoft KB4034672 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-8668

The Volume Manager Extension Driver in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2 allows an attacker to run a specially crafted application and obtain kernel information, aka "Volume Manager Extension Driver Information...

CVE-2017-8668

The Volume Manager Extension Driver in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2 allows an attacker to run a specially crafted application and obtain kernel information, aka "Volume Manager Extension Driver Information...

CVE-2017-8668

CVE-2017-8668 is a Windows kernel information-disclosure vulnerability affecting the Volume Manager Extension Driver. Affected products include Windows 7 SP1, Windows Server 2008 SP2/R2 SP1, Windows 8.1, Windows RT 8.1, and Windows Server 2012/2012 R2. The underlying issue is in the Volume Manage...

CVE-2017-8668

The Volume Manager Extension Driver in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2 allows an attacker to run a specially crafted application and obtain kernel information, aka "Volume Manager Extension Driver Information...

August 8, 2017—KB4034672 (Security-only update)

None None...

Security update for the Volume Manager Extension driver information disclosure vulnerability in Windows Server 2012: August 8, 2017

Security update for the Volume Manager Extension driver information disclosure vulnerability in Windows Server 2012: August 8, 2017 Summary An information disclosure vulnerability exists when the Volume Manager Extension Driver component improperly provides kernel information. An attacker who...

Volume Manager Extension Driver Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Volume Manager Extension Driver component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an...

KLA11846 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of...