Aggregator

Insider Threats and the Power of Just-in-Time Privileged Access 

Security Boulevard
3 weeks 4 days ago

September marks National Insider Threat Awareness Month, a reminder that some of the biggest security risks to an organization do not come from shadowy external hackers, but from the people already inside the walls. Employees, contractors, and trusted partners all … Read More

The post Insider Threats and the Power of Just-in-Time Privileged Access  appeared first on 12Port.

The post Insider Threats and the Power of Just-in-Time Privileged Access  appeared first on Security Boulevard.

Peter Senescu

CVE-2023-53445 | Linux Kernel up to 5.10.177/5.15.106/6.1.23/6.2.10 net qrtr_recvmsg use after free

VulDB Recent Entries
3 weeks 4 days ago
A vulnerability was found in Linux Kernel up to 5.10.177/5.15.106/6.1.23/6.2.10. It has been rated as critical. The impacted element is the function qrtr_recvmsg of the component net. The manipulation leads to use after free. This vulnerability is uniquely identified as CVE-2023-53445. The attack can only be initiated within the local network. No exploit exists. Upgrading the affected component is advised.
vuldb.com

CVE-2023-53440 | Linux Kernel up to 6.2.10 nilfs_sysfs_create_device_group use after free

VulDB Recent Entries
3 weeks 4 days ago
A vulnerability was found in Linux Kernel up to 6.2.10. It has been declared as critical. The affected element is the function nilfs_sysfs_create_device_group. Executing manipulation can lead to use after free. This vulnerability is handled as CVE-2023-53440. The attack can only be done within the local network. There is not any exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2023-53447 | Linux Kernel up to 6.4.4 f2fs f2fs_remount race condition

VulDB Recent Entries
3 weeks 4 days ago
A vulnerability was found in Linux Kernel up to 6.4.4 and classified as critical. This issue affects the function f2fs_remount of the component f2fs. Such manipulation leads to race condition. This vulnerability is traded as CVE-2023-53447. Access to the local network is required for this attack to succeed. There is no exploit available. It is suggested to upgrade the affected component.
vuldb.com

CVE-2023-53443 | Linux Kernel up to 5.4.234/5.10.172/5.15.99/6.1.17/6.2.4 mfd pm_runtime_resume_and_get reference count

VulDB Recent Entries
3 weeks 4 days ago
A vulnerability has been found in Linux Kernel up to 5.4.234/5.10.172/5.15.99/6.1.17/6.2.4 and classified as critical. This vulnerability affects the function pm_runtime_resume_and_get of the component mfd. This manipulation causes improper update of reference count. This vulnerability appears as CVE-2023-53443. The attacker needs to be present on the local network. There is no available exploit. The affected component should be upgraded.
vuldb.com

CVE-2023-53444 | Linux Kernel up to 6.1.41/6.4.6 ttm_lru_bulk_move_del null pointer dereference

VulDB Recent Entries
3 weeks 4 days ago
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.1.41/6.4.6. This affects the function ttm_lru_bulk_move_del. The manipulation results in null pointer dereference. This vulnerability is reported as CVE-2023-53444. The attacker must have access to the local network to execute the attack. No exploit exists. You should upgrade the affected component.
vuldb.com

Managed ad