CVE-2024-20946

CVE-2024-20946 affects Oracle Solaris kernel (version 11). The advisory and multiple feeds confirm an input-validation flaw in the Solaris kernel that can be exploited locally by a low-privilege user with logon to cause a hang or a frequent crash (denial of service). CVSS 3.1 base score is 5.5 (A...

Shedding Skin – Turla’s Fresh Faces

Turla, also known as Venomous Bear, Waterbug, and Uroboros, may be best known for what was at the time an "ultra complex" snake rootkit focused on NATO-related targets, but their malware set and activity is much broader. Our current focus is on more recent and upcoming activity from this APT, whi...