ZeroDay Findings
Sign inSign up

Every 24 hours

Tech

Original briefings on what changed in security. Each story has a small illustration matched to what it covers, a short structure, and links to the catalog records and public identifiers it discusses.

Filter by vulnerability, fix, incident, intel, or research.

  1. Research · Jan 1, 2024

    Critical Use-After-Free Vulnerability in Linux Kernel Affects Siemens Products

    A significant use-after-free vulnerability has been identified in the Linux Kernel, impacting Siemens' SIMATIC S7-1500 TM MFP firmware, posing potential security risks.

    What changed

    A critical use-after-free vulnerability has been discovered within the Linux Kernel, specifically related to nft objects and expressions. This flaw allows these objects to reference nft sets from different tables, which can lead to serious security implications once the original table is deleted.

    Who is affected

    The vulnerability primarily affects products that utilize the Linux Kernel in their operations. Notably, Siemens' firmware for the SIMATIC S7-1500 TM MFP is at risk, along with other potential systems relying on similar kernel functionalities.

    • Siemens SIMATIC S7-1500 TM MFP firmware
    • Other Siemens products leveraging Linux Kernel
    • Organizations using Linux-based systems in industrial applications

    What to do

    Organizations and users should prioritize updating their systems to mitigate the risk associated with this vulnerability. Regular monitoring for patches and security updates is essential to protect against potential exploitation.

    • Apply security patches from Siemens as they become available.
    • Review and update security policies regarding Linux Kernel usage.
    • Conduct vulnerability assessments to identify affected systems.

  2. Research · Dec 29, 2023

    Critical Vulnerability Discovered in SQLite3

    A critical vulnerability has been identified in SQLite3 versions up to 3.43.0, necessitating immediate attention from users and developers.

    What changed

    A significant vulnerability has been detected in SQLite3, specifically affecting versions up to 3.43.0. This flaw has been classified as critical due to its potential impact on application security.

    The issue resides in the sessionReadRecord function within the file ext/session/sqlite3session.c, leading to a heap-based buffer overflow that could be exploited.

    • The vulnerability is cataloged under the identifier VDB-248999.
    • It is crucial for users to be aware of this critical flaw to prevent potential exploitation.

    Who is affected

    Various users and developers of SQLite3 are at risk due to this vulnerability. It is essential to identify the impacted groups to ensure prompt action.

    The following entities should take note of this critical issue:

    • Developers utilizing SQLite3 in their applications.
    • Organizations relying on SQLite3 for database management.
    • End-users of software products that incorporate SQLite3.
    • Vendors who distribute SQLite3 as part of their software solutions.

    What to do

    To mitigate the risks associated with this vulnerability, immediate action is recommended. Users and developers should prioritize applying the necessary patches.

    Staying informed about updates and security advisories related to SQLite3 is crucial for maintaining system integrity.

    • Apply the available patches to address the vulnerability.
    • Regularly check for updates from the SQLite vendor.
    • Review application code for potential exposure to this vulnerability.