Category Archives: Advisories

Advisories

phoronix-test-suite-10.8.2-1.el9

March 25, 2022

Read Time:7 Second

FEDORA-EPEL-2022-00bbb857bb

Packages in this update:

phoronix-test-suite-10.8.2-1.el9

Update description:

Security fix for CVE-2022-0571

Advisories

Another Wiper Malware Targeted Enterprises in Ukraine #DoubleZero

March 25, 2022

Read Time:1 Minute, 0 Second

FortiGuard Labs is aware that enterprises in Ukraine were targeted by another wiper malware. Dubbed “DoubleZero,” the malware was distributed in a zip archive and destroys the compromised machine by overwriting files and deleting registry keys.Why is this Significant?This is significant because DoubleZero is the latest wiper malware used in the current Russia-Ukraine war and aims to destroy machines belonging to enterprises in Ukraine.FortiGuard Labs previous published multiple Threat Signals on other wiper malware that targeted Ukraine. See the Appendix for links to “Additional Wiper Malware Deployed in Ukraine #CaddyWiper,” “New Wiper Malware Discovered Targeting Ukrainian Interests” and “Wiper Malware Hit Ukrainian Organizations.”How Widespread is the Malware?At this time, there is no report that DoubleZero affected organizations outside of Ukraine.How does DoubleZero Work?DoubleZero was distributed in several ZIP archives, one of which is called “Virus … extremely dangerous !!!. Zip.” Once DoubleZero runs, it overwrites or uses API calls to zero out non-system files system files before moving on to overwrite critical system files and registry keys.What is the Status of Coverage?FortiGuard Labs provides the following AV coverage against the files involved in the attack:MSIL/DZeroWiper.CK!tr

Advisories

CVE-2021-20290

March 25, 2022

Read Time:20 Second

An improper authorization handling flaw was found in Foreman. The OpenSCAP plugin for the smart-proxy allows foreman clients to execute actions that should be limited to the Foreman Server. This flaw allows an authenticated local attacker to access and delete limited resources and also causes a denial of service on the Foreman server. The highest threat from this vulnerability is to integrity and system availability.

Advisories

CVE-2021-20323

March 25, 2022

Read Time:4 Second

A POST based reflected Cross Site Scripting vulnerability on has been identified in Keycloak.

Advisories

CVE-2021-22100

March 25, 2022

Read Time:16 Second

In cloud foundry CAPI versions prior to 1.122, a denial-of-service attack in which a developer can push a service broker that (accidentally or maliciously) causes CC instances to timeout and fail is possible. An attacker can leverage this vulnerability to cause an inability for anyone to push or manage apps.

Advisories

CVE-2020-21554

March 25, 2022

Read Time:10 Second

A File Deletion vulnerability exists in TinyShop 3.1.1 in the back_list parameter in controllersadmin.php, which could let a malicious user delete any file such as install.lock to reinstall cms.