CVE-2022-23989

In Stormshield Network Security SNS before 3.7.25, 3.8.x through 3.11.x before 3.11.13, 4.x before 4.2.10, and 4.3.x before 4.3.5, a flood of connections to the SSLVPN service might lead to saturation of the loopback interface. This could result in the blocking of almost all network traffic, maki...

CVE-2022-23989

In Stormshield Network Security SNS before 3.7.25, 3.8.x through 3.11.x before 3.11.13, 4.x before 4.2.10, and 4.3.x before 4.3.5, a flood of connections to the SSLVPN service might lead to saturation of the loopback interface. This could result in the blocking of almost all network traffic, maki...

Design/Logic Flaw

In Stormshield Network Security SNS before 3.7.25, 3.8.x through 3.11.x before 3.11.13, 4.x before 4.2.10, and 4.3.x before 4.3.5, a flood of connections to the SSLVPN service might lead to saturation of the loopback interface. This could result in the blocking of almost all network traffic, maki...

CVE-2022-23989

In Stormshield Network Security SNS before 3.7.25, 3.8.x through 3.11.x before 3.11.13, 4.x before 4.2.10, and 4.3.x before 4.3.5, a flood of connections to the SSLVPN service might lead to saturation of the loopback interface. This could result in the blocking of almost all network traffic, maki...

CVE-2022-23989

The CVE-2022-23989 issue affects Stormshield Network Security (SNS) prior to specific fixed versions across 3.7.25, 3.11.13, 4.2.10, and 4.3.5. The vulnerability arises when a flood of connections to the SSLVPN service saturates the loopback interface, which can block almost all network traffic a...

Stormshield Network Security security vulnerabilities

Stormshield Network Security is a next-generation UTM Unified Threat Management firewall from the French company Stormshield. Stormshield Stormshield Network Security suffers from a security vulnerability that stems from an issue with the SSLvpn service's handling of a large number of connection...

PT-2022-16392 · Stormshield · Stormshield Network Security

Name of the Vulnerable Software and Affected Versions: Stormshield Network Security SNS versions 3.7.6 through 3.7.24 Stormshield Network Security SNS versions 3.8.x through 3.11.x before 3.11.13 Stormshield Network Security SNS versions 4.x before 4.2.10 Stormshield Network Security SNS versions...

CVE-2022-23989: Undefined Security Weakness

In Stormshield Network Security SNS before 3.7.25, 3.8.x through 3.11.x before 3.11.13, 4.x before 4.2.10, and 4.3.x before 4.3.5, a flood of connections to the SSLVPN service might lead to saturation of the loopback interface. This could result in the blocking of almost all network traffic, maki...

Conti Ransomware Group Diaries, Part III: Weaponry

Part I of this series examined newly-leaked internal chats from the Conti ransomware group, and how the crime gang dealt with its own internal breaches. Part II explored what its like to be an employee of Contis sprawling organization. Todays Part III looks at how Conti abused popular commercial...

WatchGuard Firebox security vulnerabilities

Watchguard WatchGuard Firebox is an American Watchguard company that provides comprehensive network security services, from traditional IPS, GAV, website/application control and malicious software prevention. A security vulnerability exists in WatchGuard Firebox, which can be exploited by...

Fortinet FortiAnalyzer Privilege Licensing and Access Control Issues Vulnerability

Fortinet FortiAnalyzer is a centralized network security reporting solution from Fortinet USA. The product is used to collect network log data and analyze, report, and archive security events, network traffic, and Web content in the logs through the reporting suite.Fortinet FortiAnalyzer is...

PT-2022-11351 · Aruba · Aos-Cx +7

Name of the Vulnerable Software and Affected Versions: Aruba CX 6200F Switch Series versions AOS-CX 10.06.xxxx: 10.06.0170 and below Aruba 6300 Switch Series versions AOS-CX 10.06.xxxx: 10.06.0170 and below Aruba 6400 Switch Series versions AOS-CX 10.06.xxxx: 10.06.0170 and below Aruba 8320 Switc...

EulerOS 2.0 SP9 : busybox (EulerOS-SA-2022-1287)

According to the versions of the busybox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is...

EulerOS 2.0 SP9 : kernel (EulerOS-SA-2022-1308)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In unixscmtoskb of afunix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege wi...

EulerOS 2.0 SP9 : libsepol (EulerOS-SA-2022-1309)

According to the versions of the libsepol package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The CIL compiler in SELinux 3.2 has a use-after-free in cilverifyclassperms called from cilverifyclasspermission and cilpreverifyhelper...

Break into Ethical Hacking with 18 Advanced Online Courses for Just $42.99

It is predicted that 3.5 million jobs will be unfilled in the field of cybersecurity by the end of this year. Several of these jobs pay very well, and in most cases, you don't even need a college degree to get hired. The most important thing is to have the skills and certifications. The All-In-On...

EulerOS 2.0 SP5 : ImageMagick (EulerOS-SA-2022-1270)

According to the versions of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - ImageMagick is free software delivered as a ready-to-run binary distribution or as source code that you may use, copy, modify, and distribu...

EulerOS 2.0 SP5 : openssh (EulerOS-SA-2022-1280)

According to the versions of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental...

EulerOS 2.0 SP5 : nss (EulerOS-SA-2022-1278)

According to the versions of the nss packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - NSS Network Security Services versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS...

Trellix Global Defenders: Analysis and Protections for BlackByte Ransomware

Trellix Global Defenders: Analysis and Protections for BlackByte Ransomware By Taylor Mullins · February 28, 2022 BlackByte Ransomware has been in the news of late due to a successful attack against a National Football League NFL Franchise and a Joint Cybersecurity Advisory by the Federal Bureau ...