July 2024 - rwth-security - lists.rwth-aachen.de

CVE-2024-40725 & CVE-2024-40898: Apache HTTP Server Flaws Put
by Bernd Kohler 18 Jul '24

18 Jul '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CVE-2024-40725 & CVE-2024-40898: Apache HTTP Server Flaws Put Millions of Websites at Risk" VG Bernd [0] https://securityonline.info/cve-2024-40725-cve-2024-40898-apache-http-serve… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Hackers use PoC exploits in attacks 22 minutes after release
by Bernd Kohler 14 Jul '24

14 Jul '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Hackers use PoC exploits in attacks 22 minutes after release" VG Bernd [0] https://www.bleepingcomputer.com/news/security/hackers-use-poc-exploits-in-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Apache HTTP Server Update Patches Critical Source Code Disclosure
by Bernd Kohler 05 Jul '24

05 Jul '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Apache HTTP Server Update Patches Critical Source Code Disclosure Flaw (CVE-2024-39884)" --> "... upgrade to version 2.4.61 ..." VG Bernd [0] https://securityonline.info/apache-http-server-update-patches-critical-sour… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

CVE-2024-6387: Critical OpenSSH Unauthenticated RCE Flaw ‘regreSSHion’ Exposes Millions of Linux Systems
by Bernd Kohler 03 Jul '24

03 Jul '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CVE-2024-6387: Critical OpenSSH Unauthenticated RCE Flaw ‘regreSSHion’ Exposes Millions of Linux Systems" VG Bernd [0] https://securityonline.info/cve-2024-6387-critical-openssh-unauthenticated-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 3

New Intel CPU Vulnerability 'Indirector' Exposes Sensitive Data
by Bernd Kohler 02 Jul '24

02 Jul '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "New Intel CPU Vulnerability 'Indirector' Exposes Sensitive Data" VG Bernd [0] https://thehackernews.com/2024/07/new-intel-cpu-vulnerability-indirector.ht… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Arbitrary code execution vulnerability in OpenSSH patched
by Thomas Schneider 01 Jul '24

01 Jul '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier[0,1,2] FYI "A critical vulnerability in sshd(8) was present in Portable OpenSSH versions 8.5p1 and 9.7p1 (inclusive) that may allow arbitrary code execution with root privileges." --> In Debian stable/bookworm gepatcht in 1:9.2p1-2+deb12u3 (man beachte die 3 am Ende!), Debian oldstable/bullseye nicht verwundbar. VG Thomas [0]: https://security-tracker.debian.org/tracker/CVE-2024-6387 [1]: https://www.openwall.com/lists/oss-security/2024/07/01/1 [2]: https://www.qualys.com/2024/07/01/cve-2024-6387/regresshion.txt -- Fachschaft I/1 Mathematik/Physik/Informatik der RWTH Aachen Thomas Schneider Campus Mitte: Augustinerbach 2a, 52062 Aachen Telefon: +49 241 80 94506 Informatikzentrum: Ahornstraße 55, Raum 2014, 52074 Aachen Telefon: +49 241 80 26741 https://www.fsmpi.rwth-aachen.de

1 0