Category: Virtuallization

  • VMW Security Alert | vCenter Server Vulnerability – VMSA-2022-0018 / VMSA-2021-0025.2

    VMW Security Alert | vCenter Server Vulnerability – VMSA-2022-0018 / VMSA-2021-0025.2

    This article encloses two announced security vulnerabilities with vCenter server. VMSA-2022-0018 – VMware vCenter Server updates address a server-side request forgery vulnerability (CVE-2022-22982) Please see the advisory and the required security patches here: https://www.vmware.com/security/advisories/VMSA-2022-0018.html Impacted Products: VMware vCenter Server (vCenter Server) VMware Cloud Foundation (Cloud Foundation) VMSA-2021-0025.2 – VMware vCenter Server updates address a privilege…

  • New Vulnerability – VMware Tools for Windows

    New Vulnerability – VMware Tools for Windows

    Severity level: Moderate VMware has announced a new vulnerasbility with VMware Tools for Windows update addresses an XML External Entity (XXE) vulnerability (CVE-2022-22977) An XML External Entity (XXE) vulnerability in VMware Tools for Windows was privately reported to VMware. Updates are available to remediate this vulnerability in affected VMware products. To remediate CVE-2022-22977 apply the patches listed in the ‘Fixed…

  • Ovirt Hosted-Engine 4.5.x Deployment Fails with Error 500

    I’ve been struggling with the deployment of Ovirt 4.5.0 GA and 4.5.0.1 hosted-engine VM as it fails during the health check with the following error message: The Cause The root cause behind this issue is that the DB engine “Postgres” faces a problem when the engine VM updates the pachages as quoted by one of…

  • vSphere 6.7 U3 Issue | vCenter Database Gets Full

    We’ve faced an outage with our vCenter server lately, and I’d like to share my experience and the fix with you. There’s a known bug in ESXi 6.7 update 3, and this bug makes the host to flood the SEAT database of the vCenter server, and this leads to stopping the VPXD service, which means…

  • VM CPU Configuration – Best Practices

    I came across this useful article from VMware regarding the best practices of configuring vCPU, while keeping an eye on the physical CPU(s) and NUMA nodes available in the physical host. What is NUMA: NUMA stands for Non-Uniform Memory Access. To keep it simple, NUMA regulates the relationship between a guest operating system, and the…

  • Security Threat Update | VMware – security patches available

    Security Threat Update | VMware – security patches available

    VMware product updates available now to enable Hypervisor-Specific Mitigations, Hypervisor-Assisted Guest Mitigations, and Operating System-Specific Mitigations for Microarchitectural Data Sampling (MDS) Vulnerabilities (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, and CVE-2019-11091) Affected Products Product Version Running On CVE Identifier CVSSv3 Severity Fixed Version Workarounds Additional Documentation vCenter Server1 6.7 Any N/A N/A N/A 6.7 U2a None KB67577 vCenter Server1 6.5 Any N/A N/A N/A…

  • NSX-T | “root” password safety-breaker

    NSX-T | “root” password safety-breaker

    This procedure should be performed right after deploying NSX-T manager to avoid facing a terrible problem (according to VMware’s) in case that you forget, or loose the password of “root” account. If the configuration is not performed after deploying the appliance and you forget the root password, resetting the root password is not possible. NSX-T…

  • NSX-T | Securing VM Network Traffic

    NSX-T | Securing VM Network Traffic

    Here are few features in VMware NSX-T, the Software-Defined Networking solution from VMware. Distributed Network Encryption (DNE) – This is optional security capability that can selectively encrypt E-W traffic at the network layer when an application does not provide a secure channel. This is enforced at hypervisor kernel level to ensure data confidentiality, integrity, and…

  • VCSA 6.5/6.7 UI Installer Opens a blank page!

    Sometimes, running the VCSA 6.5/6.7 UI installer multiple times on the same machine makes it crash, and just opens a blank/white page (like this one in the following screenshot), where all of the buttons for Install, Upgrade, Migrate, and Restore are gone. I have faced this issue several times on different computers, and made me…

  • Vembu | Win Amazon Gift Vouchers

    Vembu | Win Amazon Gift Vouchers

    Help us with what you expect from a Free Edition With so many businesses preferring a free edition backup software, it is very important for us to understand the expectations from an end-user. So, take this brief survey and show us some love (it’s Valentine’s month, anyway!!!). In return, we promise Amazon Gift Vouchers for…