Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A flaw was found in glibc. When the getaddrinfo function is called with the AF_UNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger than 2048 bytes can potentially disclose stack contents through the function returned address data, and may cause a crash.

CVE-2023-4527 is a stack-based buffer overflow vulnerability identified in the GNU C Library (glibc) component of Red Hat Enterprise Linux 8. The flaw manifests when the getaddrinfo function is invoked with the AF_UNSPEC address family, and the system's DNS resolver is configured with the no-aaaa option in /etc/resolv.conf, which disables IPv6 AAAA queries. Under these conditions, if a DNS response received over TCP exceeds 2048 bytes, the function may improperly handle the response, leading to potential disclosure of stack memory contents via the function's returned address data. This can also cause the application or system process to crash, impacting availability. The vulnerability does not require any privileges or user interaction to exploit but has a high attack complexity because it depends on specific DNS resolver configurations and unusually large DNS responses. The CVSS v3.1 base score is 6.5, reflecting a medium severity with network attack vector, high complexity, no privileges required, no user interaction, unchanged scope, limited confidentiality impact, no integrity impact, and high availability impact. There are no known public exploits or active exploitation reported at this time. The vulnerability affects systems running Red Hat Enterprise Linux 8 with the vulnerable glibc version and configured with no-aaaa mode in DNS resolver settings. Since glibc is a core system library used by many applications, the impact can be widespread on affected systems. The primary risk is denial of service due to crashes, with some risk of information disclosure of stack contents, which could potentially aid further exploitation. The vulnerability highlights the importance of secure DNS resolver configurations and timely patching of critical system libraries.

Detailed information about CVE-2023-4527: Stack-based Buffer Overflow in Red Hat Red Hat Enterprise Linux 8 affecting Red Hat Red Hat Enterprise Linux 8. Get re

CVE-2023-4527: Stack-based Buffer Overflow in Red Hat Red Hat Enterprise Linux 8 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2023-4527: Stack-based Buffer Overflow in Red Hat Red Hat Enterprise Linux 8

Threats Tagged 'cve-2023-4527'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2023-4527'

Lead Pen Test Professional