Latest activity
-
JJohannes S reacted to leesteken's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with
Like.
The Linux kernel has had at least 500 CVE's fixed per release (before LLMs) and your PVE 7 kernel (5.15?) is many version behind, so either one could potentially be the entry point. Whether you had a good password is irrelevant. Proxmox fixed... -
JJohannes S reacted to J-Rod's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
PVE 7 and the Debian version it sits on went end of life over two (corrected from three) years ago. The list of vulnerabilities discovered and patched since then is going to be a mile long. It would even be a bad idea to expose a fully patched...
-
JJohannes S reacted to leesteken's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
Without a firewall and especially security updates they probably don't need any account or password. Maybe they entered via a VM or container? Exploits for those have been reported recently: https://forum.proxmox.com/forums/security-advisories.26/
-
JJohannes S reacted to leesteken's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
Thank you for reminding people to regularly upgrade their software (and not run unsupported versions). I do hope you can recover from backups on a fresh (and supported) Proxmox. There is a section in the PBS manual about ransomware...
-
JJohannes S reacted to gurubert's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
Sorry for your loss, but why would anyone do that?
-
JEs gibt eigentlich nur zwei Info-Quellen lt.Google Suche (KI) Quelle #1 : https://discussion.fedoraproject.org/t/virtio-changelog/128876 hier gibt es den Link zu Quelle #2 : https://fedorapeople.org/groups/virt/virtio-win/CHANGELOG steht sogar...
-
LnxBil replied to the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth.In addition what others already said about patching, no additional security on ports and running EOL software, you should also considering monitor all internet-facing stuff in order to detect non-normal behaviour, e.g. I use on some sites mTLS... -
dcsapak replied to the thread Missing `ifupdown2` 3.0.0-1.3 for ARM64 in Trixie `pve-no-subscription` repo.hi, this should now be fixed. It seems there was some error during upload that was not caught, thanks for the report! -
LnxBil reacted to Neobin's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
So, you are: Running a OS that is EOL since two years Exposing it to the internet Disabling the firewall If this is not a troll, I hope the lesson was learned...
-
JJ-Rod replied to the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth.PVE 7 and the Debian version it sits on went end of life over two (corrected from three) years ago. The list of vulnerabilities discovered and patched since then is going to be a mile long. It would even be a bad idea to expose a fully patched...
-
Ppve7bug replied to the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth.Ironically, all the virtual machines were closed with a firewall, and the services weren't publicly accessible except through Cloudflare, with access only through Cloudflare's IPs. I'm 100% sure it's a non-auth exploit in PVE 7, perhaps a...
-
LLonnie replied to the thread Update Windows 10 VM to Windows 11.@calperin I updated my 2024 post to indicate the hardware involved, and I also added a section for addressing the Secure Boot certificates that expired in June of 2026. Your disk is on sata0, which is emulated and slow. A Windows 11 upgrade...
-
HHHawk replied to the thread Kernel 7.0.14-14-pve: immediate reset + CPU machine check when igb loads on I350 (Dell XC730xd) — 6.14 unaffected.It seems quite similar to this bug: https://bugzilla.proxmox.com/show_bug.cgi?id=7969. But I am no expert.
-
Ppve7bug replied to the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth.Honestly, I didn't remember that this Proxmox installation was exposed to the internet, but I suppose that while traveling I disabled the firewall rules for convenience so I could access it freely. I wasn't aware that, despite being end-of-life...
-
gurubert reacted to leesteken's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
Thank you for reminding people to regularly upgrade their software (and not run unsupported versions). I do hope you can recover from backups on a fresh (and supported) Proxmox. There is a section in the PBS manual about ransomware... -
In a PVE-cluster, there is no master node or something like that. Just move all guests to the other nodes and power that node off. Wait a few minutes and if nothing explodes, move on with your reinstallation... ;)
-
You can just upgrade without removing it…? Are you following the upgrade guide?
-
https://forum.proxmox.com/threads/proxmox-virtual-environment-9-2-available.183742/
-
I ran into the same warning after upgrading from PVE 8 to PVE 9 with Ceph Squid. It looks like /etc/init.d/ceph is simply an obsolete conffile left behind by ceph-base: # dpkg -S /etc/init.d/ceph ceph-base: /etc/init.d/ceph # dpkg-query -W...
-
SSeverenth replied to the thread Kernel 7.0.14-14-pve: immediate reset + CPU machine check when igb loads on I350 (Dell XC730xd) — 6.14 unaffected.Just installed Debian 13 netinst , installed without issue and network connected on the same config however, once I try and install the latest PVE, it bows out at the same point journal doesn't show anything, only the previous boot prior to...