evo-aftmand-zx: get_next_guid: Ran out of Guid Space. In Cilium clusters where Cilium's Layer 7 proxy has been disabled, creating workloads with `/proxy-visibility` annotations (in Cilium >= v1.13) or `io.cilium.proxy-visibility` annotations (in Cilium ]: get_next_guid: Ran out of Guid Space. IBM X-Force ID: 266893.Ĭilium is a networking, observability, and security solution with an eBPF-based dataplane. An attacker could send a specially crafted URL request containing 'dot dot' sequences (/./) to view arbitrary files on the system. IBM License Metric Tool 9.2 could allow a remote attacker to traverse directories on the system. IBM Robotic Process Automation 23.0.9 is vulnerable to privilege escalation that affects ownership of projects. Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the domain parameter in the add_white_node function.

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. This affects measurement plug-ins written in Python using version 1.1.0 of the ni-measurementlink-service Python package and all previous versions.

These services were previously thought to be unreachable outside of the node. An improper access restriction in NI MeasurementLink Python services could allow an attacker on an adjacent network to reach services exposed on localhost.

Download the new CherryTree 1.0.0.0