Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user can trigger the overflow by providing specially crafted data. This enables the execution of arbitrary code on the target system, allowing users to write arbitrary bytes to memory and extensively read the server's memory.

CVE-2023-5869 is a critical integer overflow vulnerability identified in Red Hat Advanced Cluster Security version 4.2, specifically linked to PostgreSQL's SQL array value modification process. The flaw arises due to missing overflow checks during the modification of SQL array values, which allows an authenticated database user to supply specially crafted data that triggers an integer overflow or wraparound condition. This overflow enables the attacker to execute arbitrary code on the target system by writing arbitrary bytes to memory and reading extensive portions of the server's memory. The vulnerability is exploitable remotely over the network (AV:N) with low attack complexity (AC:L), requiring only privileges of an authenticated user (PR:L) but no user interaction (UI:N). The scope of impact is unchanged (S:U), but the consequences are severe, affecting confidentiality, integrity, and availability (C:H/I:H/A:H). This means an attacker can potentially take full control of the affected system, extract sensitive data, or disrupt services. Although no public exploits have been reported yet, the vulnerability's characteristics make it a high-risk issue, especially in environments where Red Hat Advanced Cluster Security integrates with PostgreSQL databases. The lack of available patches at the time of publication necessitates immediate attention from security teams to monitor vendor updates and apply fixes once available.

Detailed information about CVE-2023-5869: Integer Overflow or Wraparound in Red Hat Red Hat Advanced Cluster Security 4.2 affecting Red Hat Red Hat Advanced Clu

CVE-2023-5869: Integer Overflow or Wraparound in Red Hat Red Hat Advanced Cluster Security 4.2 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2023-5869: Integer Overflow or Wraparound in Red Hat Red Hat Advanced Cluster Security 4.2

Threats Tagged 'cve-2023-5869'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2023-5869'

Lead Pen Test Professional