Sep 9, 2024
2 new incidents, 1 with updates.
Started
- ClosedPatched
ImageMagick Improper Input Validation
ImageMagick contains an improper input validation vulnerability that affects the EPHEMERAL, HTTPS, MVG, MSL, TEXT, SHOW, WIN, and PLT coders. This allows a remote attacker to execute arbitrary code via shell metacharacters in a crafted image. Added to the CISA KEV catalog on 2024-09-09. CVE-2016-3714 was assigned before 2024; the KEV listing came in 2024.
ImageMagickClosed Sep 9, 2024
- ClosedPatched
Linux Kernel PIE Stack Buffer Corruption
Linux kernel contains a position-independent executable (PIE) stack buffer corruption vulnerability in load_elf_ binary() that allows a local attacker to escalate privileges. Added to the CISA KEV catalog on 2024-09-09. CISA lists known use in ransomware campaigns. CVE-2017-1000253 was assigned before 2024; the KEV listing came in 2024.
Linux KernelClosed Sep 9, 2024
Updated
- ClosedPatched
SonicWall SonicOS Improper Access Control
SonicWall SonicOS contains an improper access control vulnerability that could lead to unauthorized resource access and, under certain conditions, may cause the firewall to crash. Added to the CISA KEV catalog on 2024-09-09. CISA lists known use in ransomware campaigns.
SonicWall SonicOSClosed Sep 9, 2024
