Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

GCP Compute Engine Security

JVN Japan

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid multi-byte input sequences in IBM1364, IBM1371, IBM1388, IBM1390, and IBM1399 encodings, fails to advance the input state, which could lead to an infinite loop in applications, resulting in a denial of service, a different vulnerability from CVE-2016-10228.

CVE-2020-27618 is a medium-severity vulnerability found in the iconv function of the GNU C Library (glibc), versions 2.32 and earlier. The vulnerability arises when iconv processes invalid multi-byte input sequences specifically in the IBM1364, IBM1371, IBM1388, IBM1390, and IBM1399 character encodings. In these cases, the function fails to advance the input state correctly, causing the application to enter an infinite loop. This infinite loop results in a denial of service (DoS) condition, where the affected application becomes unresponsive or consumes excessive CPU resources. This vulnerability is distinct from a previously known issue (CVE-2016-10228) but shares the same root cause related to improper handling of invalid multi-byte sequences. The vulnerability requires local access with low privileges (AV:L, PR:L) and does not require user interaction (UI:N). It impacts availability but does not affect confidentiality or integrity. The vulnerability is classified under CWE-835 (Loop with Unreachable Exit Condition), indicating a logic flaw that prevents normal termination of a loop. No known public exploits have been reported, and no official patches are linked in the provided data, although it is expected that glibc maintainers would address this in subsequent releases. The vulnerability affects applications that rely on glibc's iconv function for character encoding conversions involving the specified IBM code pages, which are less common but may be used in legacy systems or specialized environments.

Detailed information about CVE-2020-27618: n/a in n/a affecting n/a n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2020-27618: n/a in n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2020-27618: n/a in n/a

Threats Tagged 'cve-2020-27618'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2020-27618'

Lead Pen Test Professional