Latest activity
-
Ggasherbrum reacted to pve7bug's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with
Like.
Thanks to the Proxmox team for reviewing my report. At least they took it seriously, unlike the users on this forum who think that a Debian 11 installation is hacked simply because it's EOL (and no, the OpenSSH bug doesn't affect Debian 11; it's... -
Ggasherbrum replied to the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth.nice work! and proxmox also posted a security bulletin, great to see all around
-
Ggasherbrum reacted to leesteken's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
https://forum.proxmox.com/threads/proxmox-virtual-environment-security-advisories.149331/page-4#post-867929
-
Ggasherbrum reacted to asdpiasdjoi's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
Found it. It is a complete compromise of the web interface. No pre-requisites, just a vulnerable proxmox version. There was a bug patched in pve-access-control (potentially by accident) in 2023. I will submit it to MITRE so a CVE can be issued...
-
Aasdpiasdjoi replied to the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth.The *immediate* fix, then. Yes, absolutely, you should be on PVE 9 by now. I don't think anyone is contesting that. I understand your frustration around change management. Most businesses should have either certifications or insurance that...
-
bbgeek17 replied to the thread Official status of support for multiple backup solutions.I think it's safe to say there is no official support for 3rd party products. The qualification matrix would be very complex, these are competing products, why would any vendor undertake this endeavor? Blockbridge : Ultra low latency all-NVME... -
Ccfgmgr reacted to Johannes S's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
Then you are still vulnerable due to the known and unknown security issues in PVE8 (which is EOL) and Debian Bookworm. The fix is to upgrade to the latest supported version of PVE aka PVE9 with every updated installed. Everything else is just...
-
PPatryk122PL posted the thread AMD Radeon GPU Passthrough - Infamous reset bug in Proxmox VE: Installation and configuration.Hello, I'm not going to repeat what other users said / recommended - there are plenty of tutorials that more or less can get your AMD gpu working for VM passthrough. My problem lays with very old and still preset in 9000 radeon gpu series issue...
-
Ccfgmgr reacted to Neobin's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
So, you now got your security advisory for a vulnerability, in a over three year old version of a software component, which was at the time it would have been relevant neither internally discovered nor from anyone reported and hopefully also not...
-
gurubert reacted to arzhost's post in the thread 2. IP - sehe den Wald vor lauter Bäumen nicht with Like.
eth0:0 kein echtes separates Interface ist, sondern nur ein Alias für eine zusätzliche IP auf eth0. Dein aktuelles Setup fügt die IP zwar korrekt hinzu, leitet aber keinen eingehenden Traffic automatisch zu einer VM oder einem anderen Ziel... -
Mmanikanta posted the thread Proxmox Virtual Environment 7.4-3 crash issue in Proxmox VE: Installation and configuration.Please check the above snippet which I got during booting up my proxmox. How to get resolved without losing existing data.
-
-
gurubert replied to the thread Purpose of pve-dbus-vmstate@VMID.service?.It looks like the timeout messes things up.
-
gurubert reacted to t.lamprecht's post in the thread Purpose of pve-dbus-vmstate@VMID.service? with Like.
That service is currently used to transfer a VM’s connection-tracking state during live migration, so established connections (within the guest) continue to be recognized by stateful firewalls on the target node. The stale object should not be...
-
Lluckman212 replied to the thread [BETA] Community Linux 7.1 kernel packages for Proxmox VE (7.1.0-1~beta1+1).Hope 7.1 switches to an available opt-in kernel soon
-
GGilberto Ferreira reacted to leesteken's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
https://forum.proxmox.com/threads/proxmox-virtual-environment-security-advisories.149331/page-4#post-867929
-
BBu66as reacted to odi1875's post in the thread Proxmox 8.3 + Netzwerkkarte Broadcom BCM57416 with Like.
I found this version, but I haven’t tested it: https://ftp.abacus.cz/support/FW/MB/SUPERMICRO/DRIVER/H1x/BCM57416/v232.1.132.8c/lom.zip
-
Wwaltar reacted to arzhost's post in the thread 2. IP - sehe den Wald vor lauter Bäumen nicht with Like.
eth0:0 kein echtes separates Interface ist, sondern nur ein Alias für eine zusätzliche IP auf eth0. Dein aktuelles Setup fügt die IP zwar korrekt hinzu, leitet aber keinen eingehenden Traffic automatisch zu einer VM oder einem anderen Ziel...
-
Oodi1875 replied to the thread Proxmox 8.3 + Netzwerkkarte Broadcom BCM57416.I found this version, but I haven’t tested it: https://ftp.abacus.cz/support/FW/MB/SUPERMICRO/DRIVER/H1x/BCM57416/v232.1.132.8c/lom.zip
-
JJohannes S reacted to t.lamprecht's post in the thread Purpose of pve-dbus-vmstate@VMID.service? with Like.
That service is currently used to transfer a VM’s connection-tracking state during live migration, so established connections (within the guest) continue to be recognized by stateful firewalls on the target node. The stale object should not be...
-
Wwoma replied to the thread KVM NX huge page recovery burns a core per guest on kernel 7.0.x.Thanks for clarification. So basically you should not be affected if your CPU desgin is 2019 or newer as CVE is dated 2018. My rather new AMD Epyc are not affected. root@xxxxxx ~ # cat /sys/devices/system/cpu/vulnerabilities/itlb_multihit Not...
