Malware, Network Security, Patch/Configuration Management, Vulnerability Management

Matrix SSL patched for heap overflow and other bugs

Greg MastersOctober 12, 2016

Patches were issued for flaws in MatrixSSL, v3.8.5 and previous, according to an advisory from CERT.

MatrixSSL is a cryptographic protocol designed for custom apps in embedded hardware environments.

CERT stated that in CVE-2016-6890, the Subject Alt Name field of X.509 certificates is not properly parsed. Thus a specially crafted certificate could result in a heap-based buffer overflow and arbitrary code execution.

In another bug, CVE-2016-6891, the ASN.1 Bit Field is not properly parsed. Here, a specially crafted certificate could lead to a denial-of-service condition due to an out-of-bounds read in memory, the advisory stated.

For CVE-2016-6892, the x509FreeExtensions() function does not properly parse X.509 certificates, CERT stated. A denial of service condition could result if a specially crafted certificate leads to a free operation on unallocated memory.

To patch these issues, users are advised to update with the vendor's v3.8.6.

Greg Masters

Vulnerability Management

Ukrainian documents laced with old malware exposed

SC StaffApril 24, 2024

CyberScoop reports that over 100 Ukrainian local government and police documents uploaded to VirusTotal in February were discovered to have been infected with the OfflRouter malware, which dates back to 2015 and could only spread through already compromised files and removable media devices.

Computer keyboard, close-up button of the flag of North Korea.

Network Security

Antivirus updates exploited for GuptiMiner malware deployment

SC StaffApril 24, 2024

Intrusions hijacking the eScan antivirus software's updating mechanism have been conducted by threat actors suspected to be linked to North Korean advanced persistent threat operation Kimsuky to facilitate the delivery of the sophisticated GuptiMiner malware that would then distribute cryptocurrency mining payloads, according to BleepingComputer.

Computer Hacked, System Error, Virus, Cyber attack, Malware Concept. Danger Symbol. 3d rendering.

Data Security

Ongoing international infostealer campaign involves CDN cache

SC StaffApril 24, 2024

BleepingComputer reports that U.S., Germany, Japan, and UK systems have been subjected to ongoing attacks by suspected Vietnamese hacking group CoralRaider leveraging a content delivery network cache to facilitate the deployment of information-stealing payloads.

Related Events

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

Matrix SSL patched for heap overflow and other bugs

Related

Ukrainian documents laced with old malware exposed

Antivirus updates exploited for GuptiMiner malware deployment

Ongoing international infostealer campaign involves CDN cache

Related Events

Top Ten ATT&CK Techniques: The Rise of ‘Hunter-Killer’ Malware

Get daily email updates