ZeroDay Findings
Sign inSign up

Every 4 hours

Cyber

Keywords match titles. Record type separates incidents, intel, and research from CVEs.

  1. Research · Jan 31, 2024 · ZeroDay Catalog

    Critical Use-After-Free Vulnerability Identified in Linux Kernel's Netfilter Component

    A significant use-after-free vulnerability in the Linux kernel's netfilter component has been discovered, allowing for potential local privilege escalation.

    What changed

    • The vulnerability arises when positive values are allowed as drop error within the hook verdict.
    • The nf_hook_slow() function can lead to a double free vulnerability when NF_DROP is issued with a drop error that resembles NF_ACCEPT.
    • Upgrading past commit f342de4e2f33e0e39165d8639387aa6c19dff660 is essential to mitigate this risk.

    Who is affected

    • NetApp users, particularly those running the h300s firmware.
    • Organizations relying on Linux-based systems for critical infrastructure.
    • Developers and administrators managing Linux kernel deployments.
    • Any entity that utilizes the netfilter component for network packet filtering.

    What to do

    • Upgrade the Linux kernel to a version beyond commit f342de4e2f33e0e39165d8639387aa6c19dff660.
    • Review system configurations and assess the potential impact of the vulnerability.
    • Monitor for any unusual activity that may indicate exploitation attempts.
    • Stay informed about further updates from the Linux kernel development community.

    Original report

  2. Research · Jan 31, 2024 · ZeroDay Catalog

    Server-Side Request Forgery Vulnerability in Ivanti Products

    A critical server-side request forgery vulnerability has been identified in Ivanti's Connect Secure, Policy Secure, and Neurons products, potentially allowing unauthorized access to restricted resources.

    What changed

    A server-side request forgery (SSRF) vulnerability has been discovered in the SAML component of Ivanti Connect Secure, Policy Secure, and Neurons. This flaw enables attackers to access restricted resources without proper authentication, posing a significant security risk to affected systems.

    Who is affected

    Organizations utilizing Ivanti's Connect Secure, Policy Secure, and Neurons products are at risk due to this vulnerability. The impact is particularly concerning for those managing sensitive data and requiring stringent access controls.

    • Ivanti Connect Secure (ICS)
    • Ivanti Policy Secure
    • Ivanti Neurons
    • Organizations handling sensitive information

    What to do

    It is imperative for affected organizations to assess their systems for this vulnerability and implement necessary security measures. Immediate action should include reviewing access controls and applying any available patches or updates provided by Ivanti.

    Original report