Tag Archives: cve

Cisco 與 Fortinet 防火牆的 RCE 漏洞

Posted on August 20, 2016 by Gea-Suan Lin

NSA 使用這些漏洞來大量監聽企業的流量：「Leaked Exploits are Legit and Belong to NSA: Cisco, Fortinet and Snowden Docs Confirm」。 Cisco 已經確認這個安全性漏洞了，全系列包括已經停產的 Cisco PIX、上個世代的 Cisco ASA 5500 (但還有些型號還在賣)，以及目前主力的 Cisco ASA 5500-X，另外還包括了安全模組系列也中獎：「Cisco Adaptive Security Appliance SNMP Remote Code Execution Vulnerability」。 Cisco ASA 5500 Series Adaptive Security … Continue reading →

Posted in Computer, Hardware, Murmuring, Network, Political, Security, Social, VPN, WWW | Tagged , , , , , , , , , , , , , , , , | Leave a comment

Libgcrypt 與 GnuPG 的安全性問題

Posted on August 20, 2016 by Gea-Suan Lin

在「Security fixes for Libgcrypt and GnuPG 1.4 [CVE-2016-6316]」這邊看到這個歷史悠久的 bug： Felix Dörre and Vladimir Klebanov from the Karlsruhe Institute of Technology found a bug in the mixing functions of Libgcrypt's random number generator: An attacker who obtains 4640 bits from the … Continue reading →

Posted in Computer, Murmuring, Security, Software | Tagged , , , , , , , , , , , | Leave a comment

OpenSSL 的 DSA 被 Side-channel attack 打爆

Posted on June 16, 2016 by Gea-Suan Lin

在「Make Sure DSA Signing Exponentiations Really are Constant-Time」這篇文章裡面，直接透過 end-to-end 的 timing attack 打爆 (也就是透過 internet 觀察攻擊)，而不需要在同一台機器上對 cache 之類的區域攻擊： A unique feature of our work is that we target common cryptographic protocols. Previous works that demonstrate cache-timing key-recovery attack only target … Continue reading →

Posted in Computer, Murmuring, Network, Security, Software | Tagged , , , , , , , , , , , , , | Leave a comment

最近的兩個安全性漏洞：OpenSSL、ImageMagick

Posted on May 4, 2016 by Gea-Suan Lin

OpenSSL 的安全性漏洞公告：「OpenSSL Security Advisory [3rd May 2016]」。ImageMagick 的安全性漏洞說明頁：「ImageTragick」。 CVE-2016-2107 是修 Lucky 13 問題時沒修好造成的： This issue was introduced as part of the fix for Lucky 13 padding attack (CVE-2013-0169). The padding check was rewritten to be in constant time by making … Continue reading →

Posted in Computer, Murmuring, Security, Software | Tagged , , , | Leave a comment

Git 的安全性問題

Posted on March 17, 2016 by Gea-Suan Lin

在「Remote Code Execution in all git versions (client + server) < 2.7.1: CVE-2016-2324, CVE-2016‑2315」這邊看到歡樂的 CVE-2016-2315 與 CVE-2016-2324，屬於 RCE 類漏洞。 Git 2.7.1 之前的所有版本都有問題，看起來由於問題過於大條，在 2016/02/06 發表的「Git v2.7.1 Release Notes」沒有標出這兩個 CVE，讓所有 vendor 有時間升級。 不過看起來 GitLab 不在被通知的 vendor 裡面，很無奈的在 CVE 公開後馬上推出新版，需要升級到最新版本：「GitLab 8.5.7 Released」。

Posted in Computer, Murmuring, Programming, Security, Software | Tagged , , , , , , , | 3 Comments

CVE-2015-7547：getaddrinfo() 的 RCE (Remote Code Execution) 慘案

Posted on February 17, 2016 by Gea-Suan Lin

Google 寫了一篇關於 CVE-2015-7547 的安全性問題：「CVE-2015-7547: glibc getaddrinfo stack-based buffer overflow」。 Google 的工程師在找 OpenSSH 連到某台特定主機就會 segfault 的通靈過程中，發現問題不在 OpenSSH，而是在更底層的 glibc 導致 segfault： Recently a Google engineer noticed that their SSH client segfaulted every time they tried to connect to a specific host. That … Continue reading →

Posted in Computer, DNS, Linux, Murmuring, Network, OS, Security, Software | Tagged , , , , , , , , , , , , , , , , , , , , | Leave a comment

OpenSSH client 的重大安全性更新

Posted on January 15, 2016 by Gea-Suan Lin

CVE-2016-0777 與 CVE-2016-0778 安全性漏洞是關於 OpenSSH client 的部分：(USN-2869-1: OpenSSH vulnerabilities) It was discovered that the OpenSSH client experimental support for resuming connections contained multiple security issues. A malicious server could use this issue to leak client memory to the server, including … Continue reading →

Posted in Computer, Murmuring, Network, Security, Software | Tagged , , , , , , , | 1 Comment

PuTTY 安全性問題 (CVE-2015-5309)

Posted on November 9, 2015 by Gea-Suan Lin

雖然很久沒用 PuTTY 了 (因為用 Ubuntu 很久了)，不過很難得看到 PuTTY 有安全性問題。 PuTTY 官方發佈了安全性通報 CVE-2015-5309：「PuTTY vulnerability vuln-ech-overflow」： Versions of PuTTY and pterm between 0.54 and 0.65 inclusive have a potentially memory-corrupting integer overflow in the handling of the ECH (erase characters) control sequence in … Continue reading →

Posted in Computer, Murmuring, Network, Security, Software | Tagged , , , , , , , , , , , , , , | Leave a comment

Google Chrome 會 bypass Adblock 的問題

Posted on September 8, 2015 by Gea-Suan Lin

新版的 Google Chrome 使得 YouTube 可以繞過 Adblock 類軟體的阻擋限制 (像是 uBlock Origin)，導致這些使用者會需要「看完完整的廣告影片 (無法 skip)」才能看本篇：「Google Chrome reportedly bypassing Adblock, forces users to watch full-length video ads」。 目前確認這是在修正 CVE-2015-1297 時產生的 bug： Update: We have been contacted by Rob Wu, a developer on the … Continue reading →

Posted in Browser, Computer, GoogleChrome, Murmuring, Network, Software | Tagged , , , , , , , , , , | Leave a comment

對 GitHub 的 Public Key 分析

Posted on June 4, 2015 by Gea-Suan Lin

在 Hacker News Daily 上看到有人針對 GitHub 上的 Public Key 分析：「Auditing GitHub users’ SSH key quality」。 這個分析主要用的是 GitHub 的 .keys 功能取得： A little known feature of GitHub is the ability to look at the public SSH keys that other users have … Continue reading →

Posted in Computer, Murmuring, Network, Security | Tagged , , , , , , , | Leave a comment