cybersec

Vulnerability reports and security advisories: CVEs, vendor bulletins, patches and what to do about them.

[Ubuntu] USN-6250-1: Linux kernel vulnerabilities (severe!)

[Ubuntu] USN-6250-1: Linux kernel vulnerabilities (severe!)

Ubuntu's USN-6250-1 fixes several serious Linux kernel vulnerabilities. They include an OverlayFS permission flaw that allows local privilege escalation (CVE-2023-2640), an IP-VLAN out-of-bounds write (CVE-2023-3090), and a netfilter use-after-free (CVE-2023-31248).

[tom's hardware] AMD 'Zenbleed' Bug Leaks Data From Zen 2 Ryzen, EPYC CPUs: Most Patches Coming Q4 (Updated)

[tom's hardware] AMD 'Zenbleed' Bug Leaks Data From Zen 2 Ryzen, EPYC CPUs: Most Patches Coming Q4 (Updated)

Tavis Ormandy, a researcher with Google Information Security, posted today about a new vulnerability he independently found in AMD's Zen 2 processors. The 'Zenbleed' vulnerability spans the entire Zen 2 product stack, including AMD's EPYC data center processors and the Ryzen 3000/4000/5000 CPUs.

[Qualys] CVE-2023-38408: Remote Code Execution in OpenSSH’s forwarded ssh-agent

[Qualys] CVE-2023-38408: Remote Code Execution in OpenSSH’s forwarded ssh-agent

The Qualys Threat Research Unit (TRU) has discovered a remote code execution vulnerability in OpenSSH’s forwarded ssh-agent. This vulnerability allows a remote attacker to potentially execute arbitrary commands on vulnerable OpenSSH’s forwarded ssh-agent.

[TheHackerNews] Zero-Day Alert: Apple Releases Patches for Actively Exploited Flaws in iOS, macOS, and Safari

[TheHackerNews] Zero-Day Alert: Apple Releases Patches for Actively Exploited Flaws in iOS, macOS, and Safari

Apple has released updates for iOS, iPadOS, macOS, watchOS, and Safari to fix a set of vulnerabilities it says were actively exploited in the wild. The Hacker News covers the zero-days and the affected platforms.

Mikrotik RouterOS RADVD Out-Of-Bounds Write Remote Code Execution Vulnerability

Mikrotik RouterOS RADVD Out-Of-Bounds Write Remote Code Execution Vulnerability

CVE-2023-32154 is an out-of-bounds write in MikroTik RouterOS's RADVD that allows remote code execution. It was exploited at Pwn2Own Toronto, but MikroTik says it only learned of it in May 2023 and patched it about five months later.

[thehackernews] Apple Warns of 3 New Vulnerabilities Affecting iPhone, iPad, and Mac Devices

[thehackernews] Apple Warns of 3 New Vulnerabilities Affecting iPhone, iPad, and Mac Devices

Apple has announced three new vulnerabilities affecting iOS, iPadOS, and macOS devices. The Hacker News' Ravie Lakshmanan reported on the flaws on February 22, 2023.

[DARKReading] Pair of Galaxy App Store Bugs Offer Cyberattackers Mobile Device Access

[DARKReading] Pair of Galaxy App Store Bugs Offer Cyberattackers Mobile Device Access

Two bugs in Samsung's Galaxy App Store could let attackers download apps or direct users to a malicious domain on devices running Android 12 and below. Dark Reading covers the flaws.

[GBHackers] Over 6000 Internet-Exposed Cacti Servers are Unpatched for Critical Security Vulnerability

[GBHackers] Over 6000 Internet-Exposed Cacti Servers are Unpatched for Critical Security Vulnerability

Over 6000 Internet-Exposed Cacti Servers are Unpatched for Critical Security VulnerabilityA

[securityonline] CVE-2021-26316: Code Execution Flaw in AMD EPYC and Ryzen processors

[securityonline] CVE-2021-26316: Code Execution Flaw in AMD EPYC and Ryzen processors

CVE-2021-26316: Code Execution Flaw in AMD EPYC and Ryzen processorsThe