[ad_1]
eSecurity Planet content material and product suggestions are editorially unbiased. We might earn money whenever you click on on hyperlinks to our companions. Be taught Extra.
This week, Ivanti takes heart stage once more with a brand new set of safety flaws, but it surely’s bought loads of firm: Google, ecommerce platform Magento, and WordPress plugin LayerSlider be part of it, in addition to model 2 of Hypertext Switch Protocol. eSecurity Planet additionally follows up on a Linux-based vulnerability talked about in final week’s recap. I like to recommend instantly updating any gadgets or software program variations if your enterprise makes use of any of the next merchandise.
March 27, 2024
Not too long ago Patched SQL Injection Concern Impacts LayerSlider Plugin
Kind of vulnerability: Unauthenticated SQL injection.
The issue: LayerSlider, a WordPress plugin for visible web site content material and graphic design, had an SQL injection vulnerability that was not too long ago patched. When exploited, the vulnerability allowed an attacker to steal knowledge like password hashes from databases. Wordfence, the creators of a WordPress safety plugin, estimate over a million lively installations of LayerSlider on the web.
Wordfence posted a discover that the researcher who reported this vulnerability to them acquired a $5,500 reward. Wordfence hosts bug bounty occasions with the aim of rewarding those that uncover safety threats.
The vulnerability is tracked as CVE-2024-2879 and has a Crucial CVSS ranking of 9.8.
The repair: LayerSlider model 7.10.1 fixes this vulnerability.
April 1, 2024
Lengthy-Hidden OS Vulnerability Now Has Up to date Payload Information
Kind of vulnerability: Unauthorized distant entry to Safe Shell.
The issue: In final week’s recap, we talked about a vulnerability in XZ Utils, a command-line software for knowledge compression, that permits an attacker to achieve distant Safe Shell (SSH) entry with out being approved. The vulnerability, CVE-2024-3094, is current by malicious code within the software, which the open-source neighborhood found in variations 5.6.0 and 5.6.1 of XZ Utils.
This week, the researchers at JFrog have up to date payload info for the vulnerability. JFrog offers an in depth record of steps that the payload performs. Moreover, researchers have revealed a backdoor shopper to GitHub that XZ Utils customers can use to push payloads to their contaminated servers. JFrog notes that is largely helpful for analysis, to check patched variations to contaminated ones.
Affected distributions of XZ Utils embody Fedora, Debian, Kali, and OpenSUSE. Crimson Hat Enterprise Linux and Ubuntu, nonetheless, weren’t affected.
The repair: JFrog offers directions for locating whether or not your Linux distribution is weak, with instance code of weak and protected outputs. The Cybersecurity & Infrastructure Safety Company recommends groups downgrade affected software program to a non-vulnerable model of XZ Utils.
In case your group wants a constant methodology of figuring out vulnerabilities, try our record of the greatest vulnerability scanning instruments.
April 2, 2024
Replace Pixel Gadgets to Most Current Google Patch
Kind of vulnerability: Zero-day.
The issue: Android not too long ago disclosed two vulnerabilities in Google’s Pixel telephones on its Pixel-specific safety bulletin. The 2 flaws, CVE-2024-29745 and CVE-2024-29748, are each zero-days. Every has a Excessive severity ranking.
CVE-2024-2975 is an info disclosure subject within the bootloader element of the Pixel gadget. CVE-2024-29748 permits a risk actor to bypass the firmware and escalate their privileges when exploiting it.
The repair: In response to the safety discover, supported gadgets will probably be up to date to the 2024-04-05 patch degree. Android encourages prospects to simply accept the safety updates on their gadgets. When your cellphone begins the replace course of, don’t wait to carry out it.
Ivanti Runs into Additional Snags with ICS & IPS Networking Merchandise
Kind of vulnerability: Heap overflow, null pointer deference, and XML entity enlargement vulnerabilities.
The issue: Ivanti’s latest Join Safe and Coverage Safe vulnerabilities don’t have crucial scores, however they need to be patched as quickly as potential regardless. Ivanti launched a safety bulletin for the next vulnerabilities:
- CVE-2024-21894: Heap overflow vulnerability within the IPsec element of Ivanti Coverage Safe and Ivanti Join Safe, which may result in a denial-of-service assault and potential arbitrary code execution.
- CVE-2024-22052: Null pointer dereference vulnerability, additionally within the IPSec element of the merchandise, which allows an unauthenticated attacker to ship requests that crash ICS and IPS in a DoS assault.
- CVE-2024-22053: Heap overflow vulnerability within the IPSec element of each merchandise, which permits an unauthenticated attacker to carry out particular requests that provoke a DoS assault or learn reminiscence knowledge.
- CVE-2024-22023: XML entity enlargement or XEE vulnerability within the SAML element of each merchandise, which allows an unauthenticated attacker to ship XML requests that overwhelm the system and trigger a DoS assault.
This new set of points prompted Ivanti to vow a safety overhaul of their methods.
The repair: Ivanti not too long ago developed a remediation course of for the vulnerabilities. Customers ought to use the data base article that gives remediation directions to repair their very own surroundings.
April 3, 2024
D-Hyperlink Vulnerability Impacts 1000’s of NAS Gadgets
Kind of vulnerability: Backdoor and command injection.
The issue: A researcher generally known as NetSecFish found a vulnerability inside some end-of-life D-Hyperlink network-attached storage gadgets. The vulnerability impacts a perform of /cgi-bin/nas_sharing.cgi, a file of HTTP GET Request Handler. It has a backdoor resulting from hardcoded credentials, in accordance with the unique researcher, and it might probably additionally result in a command injection assault that may be carried out remotely.
In response to the Nationwide Institute of Requirements & Know-how (NIST), affected variations embody D-Hyperlink DNS-320L, DNS-325, DNS-327L and DNS-340L as much as 20240403. This vulnerability is tracked as CVE-2024-3273 and has a Excessive severity rating of seven.3.
The repair: NetSecFish recommends making use of any related patches from D-Hyperlink. Nonetheless, the NAS gadgets are presently end-of-life, so they need to get replaced by gadgets which might be actively supported by a storage producer.
HTTP/2 Has Newly Uncovered DoS Vulnerability
Kind of vulnerability: Packet overload resulting in denial-of-service assault.
The issue: The second revision of HyperText Switch Protocol (HTTP), used to load net pages, has a not too long ago found vulnerability. Messages despatched by HTTP/2 are permitted to have named fields within the header and the trailer sections of the message.
In response to Carnegie Mellon College’s CERT Coordination Middle, “These header and trailer fields are serialised as subject blocks in HTTP/2… Many HTTP/2 implementations don’t correctly restrict or sanitize the quantity of CONTINUATION frames despatched inside a single stream.” If an attacker sends knowledge packets to the goal server, the related CONTINUATION frames gained’t be correctly appended. This causes an out-of-memory crash, Carnegie Mellon mentioned.
There are a number of CVEs for this vulnerability, every related to a special HTTP/2 implementation. Affected methods embody the Apache HTTP Server Mission, impacted by CVE-2024-27316, and Crimson Hat, impacted by seven totally different CVEs.
The repair: We advocate safety groups instantly seek the advice of the record of vulnerabilities and patch any implementations as wanted. If there’s no lively patch, we propose disabling HTTP/2 on any enterprise servers.
April 4, 2024
Magento Backdoor Is a Menace to Ecommerce Websites
Kind of assault: Command injection.
The issue: A vulnerability in open-source ecommerce platform Magento has been not too long ago exploited. The flaw is an arbitrary code execution vulnerability that allows attackers to inject backdoors into Magento’s code.
Adobe has launched a safety bulletin with impression info. The vulnerability is rated crucial, with a CVSS rating of 9.1. Whereas Adobe launched this info in February, risk actors are nonetheless exploiting it, primarily based on analysis from Sansec. The malicious XML code in Magento’s servers is repeatedly infecting Magento customers’ methods — it’s a persistent subject.
The repair: Adobe recommends updating Magento OS to the next variations primarily based in your present model:
- 2.4.6-p4 for two.4.6-p3 and earlier
- 2.4.5-p6 for two.4.5-p5 and earlier
- 2.4.4-p7 for two.4.4-p6 and earlier
Learn subsequent:
Featured Companions: Vulnerability Administration Software program
[ad_2]
