CVE-2023-27989

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') (CWE-120)

Published: Jun 5, 2023 / Updated: 17mo ago

Successful exploitation of these vulnerabilities can lead to two significant security risks: denial-of-service (DoS) attacks and remote code execution. This highlights the significance of promptly addressing vulnerabilities and applying necessary security patches and updates to mitigate potential risks.

The threat actors behind the DDoSia attack tool have come up with a new version that incorporates a new mechanism to retrieve the list of targets to be bombarded with junk HTTP requests in an attempt to bring them down.The updated variant, written in Golang, "implements an additional security mechanism to conceal the list of targets, which is transmitted from the [command-and-control] to the users," cybersecurity company Sekoia said in a technical write-up. ∗∗∗ Multiple vulnerabilities in IBM Java SDK affect IBM License Metric Tool v9.

Multiple CVEs may affect IBM\u00ae SDK, Java\u2122 Technology Edition shipped with IBM CICS TX Standard Multiple CVEs may affect IBM\u00ae SDK, Java\u2122 Technology Edition shipped with IBM CICS TX Advanced

Zyxel NR7101 devices are vulnerable to a denial of service, caused by a buffer overflow in the CGI program. By sending a specially crafted HTTP request, a remote authenticated attacker could exploit this vulnerability to cause a denial of service condition.

Successful exploitation of these vulnerabilities can lead to two significant security risks: denial-of-service (DoS) attacks and remote code execution. This highlights the significance of promptly addressing vulnerabilities and applying necessary security patches and updates to mitigate potential risks.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday placed two recently disclosed flaws in Zyxel firewalls to its Known Exploited Vulnerabilities ( KEV ) catalog, based on evidence of active exploitation. While the exact nature of the attacks is unknown, the development comes days after another flaw in Zyxel firewalls ( CVE-2023-28771 ) has been actively exploited to ensnare susceptible devices into a Mirai botnet .