ZeroDay Findings
Sign inSign up

Every 24 hours

Tech

Original briefings on what changed in security. Each story has a small illustration matched to what it covers, a short structure, and links to the catalog records and public identifiers it discusses.

Filter by vulnerability, fix, incident, intel, or research.

  1. Research · Feb 9, 2024

    Critical Out-of-Bounds Write Vulnerability Discovered in Fortinet FortiOS and FortiProxy

    A serious out-of-bounds write vulnerability has been identified in multiple versions of Fortinet FortiOS and FortiProxy, potentially allowing attackers to execute unauthorized code.

    What changed

    Fortinet has announced a significant security vulnerability affecting its FortiOS and FortiProxy products. This out-of-bounds write issue could allow attackers to execute unauthorized commands or code by sending specially crafted requests.

    The vulnerability spans several versions of FortiOS and FortiProxy, indicating a broad potential impact across various deployments.

    Who is affected

    Organizations using Fortinet's FortiOS and FortiProxy are at risk due to this vulnerability. The following products and versions are specifically affected:

    FortiOS versions: 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, 6.0.0 through 6.0.17.

    • Fortinet FortiOS users across various industries.
    • Organizations utilizing FortiProxy for secure web gateway services.
    • IT departments managing network security appliances.

    What to do

    Organizations should immediately assess their Fortinet deployments to determine if they are using any of the affected versions. It is crucial to prioritize updating or patching systems to mitigate the risk posed by this vulnerability.

    Staying informed about security advisories from Fortinet and implementing recommended security practices can further enhance protection against potential exploitation.

    • Review and update FortiOS and FortiProxy to the latest secure versions.
    • Monitor network traffic for any unusual activity that may indicate exploitation attempts.
    • Implement additional security measures, such as firewalls and intrusion detection systems, to safeguard against unauthorized access.

  2. Research · Feb 5, 2024

    Critical Vulnerability Found in M2Crypto Affecting TLS Servers

    A significant flaw in M2Crypto has been discovered, potentially allowing attackers to decrypt sensitive TLS communications.

    What changed

    A serious vulnerability has been identified in M2Crypto, a widely used cryptographic library. This flaw could enable remote attackers to decrypt messages captured during TLS sessions that utilize RSA key exchanges.

    The implications of this vulnerability are severe, as it may lead to the exposure of confidential or sensitive information, jeopardizing data integrity and privacy.

    Who is affected

    Various products and systems utilizing M2Crypto are at risk, particularly those relying on RSA key exchanges for TLS communications.

    Organizations using Red Hat Enterprise Linux with M2Crypto are especially vulnerable to this issue.

    • Red Hat Enterprise Linux users
    • Developers utilizing M2Crypto in their applications
    • Organizations managing sensitive data over TLS
    • Any systems employing RSA key exchanges in their security protocols

    What to do

    Affected users and organizations should prioritize assessing their systems for the presence of M2Crypto and the specific vulnerability.

    Implementing updates or patches provided by the vendor is crucial to mitigate the risks associated with this flaw.

    • Review and update M2Crypto to the latest version as soon as possible.
    • Evaluate the use of RSA key exchanges in TLS configurations and consider alternatives if necessary.
    • Monitor for any advisories or updates from Red Hat regarding this vulnerability.