Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall element is garbage-collected when the pipapo set is removed, the element can be deactivated twice. This can cause a use-after-free issue on an NFT_CHAIN object or NFT_OBJECT object, allowing a local unprivileged user with CAP_NET_ADMIN capability to escalate their privileges on the system.

CVE-2024-0193 is a high-severity use-after-free vulnerability identified in the netfilter subsystem of the Linux kernel. The issue arises specifically when the catchall element is garbage-collected during the removal of a pipapo set, causing the element to be deactivated twice. This double deactivation leads to a use-after-free condition on either an NFT_CHAIN or NFT_OBJECT structure. Use-after-free vulnerabilities can cause memory corruption, leading to unpredictable behavior including privilege escalation or system crashes. In this case, a local attacker possessing the CAP_NET_ADMIN capability—a capability that allows network administration tasks—can exploit this flaw to escalate their privileges on the system. The vulnerability does not require user interaction but does require local access with specific capabilities, limiting remote exploitation potential. The CVSS v3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability. No public exploits or active exploitation in the wild have been reported yet. The vulnerability affects Linux kernel versions that include the vulnerable netfilter code, although specific affected versions are not listed. The netfilter subsystem is widely used for packet filtering and firewall functionality in Linux, making this vulnerability relevant for many Linux-based systems, especially servers and network appliances. The flaw was reserved and published in early 2024, and vendors are expected to release patches to address it.

Detailed information about CVE-2024-0193: Use After Free. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-0193: Use After Free - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-0193: Use After Free

Threats Tagged 'cve-2024-0193'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-0193'

Lead Pen Test Professional