Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

ippusbxd

A stack based buffer overflow vulnerability is present in OpenPrinting ippusbxd 1.34. A specially configured printer that supports IPP-over-USB can cause a buffer overflow which can lead to a arbitrary code execution in a privileged service. To trigger the vulnerability, a malicious device would need to be connected to the vulnerable system over USB.

CVE-2024-45062 is a stack-based buffer overflow vulnerability identified in OpenPrinting's ippusbxd version 1.34, a daemon that facilitates IPP (Internet Printing Protocol) over USB connections. The flaw stems from improper handling of data sent by a connected printer device that supports IPP-over-USB. Specifically, a maliciously crafted printer device can send data that overflows a stack buffer within ippusbxd, leading to memory corruption. This corruption can be exploited to execute arbitrary code with the privileges of the ippusbxd service, which typically runs with elevated permissions to manage printing tasks. The attack vector requires physical access to the target system to connect the malicious USB device, and no user interaction or authentication is necessary to trigger the vulnerability. The vulnerability is classified under CWE-121 (Stack-based Buffer Overflow), indicating a classic memory safety issue. The CVSS v3.1 base score is 6.4, reflecting a medium severity level due to the requirement for physical access and high attack complexity (AC:H). The impact includes full compromise of confidentiality, integrity, and availability of the affected system, as arbitrary code execution can lead to system takeover. No patches or exploits are currently publicly available, but the vulnerability is published and should be addressed promptly. ippusbxd is commonly used in Linux environments to enable printing over USB, making systems running Linux-based operating systems with ippusbxd 1.34 vulnerable if exposed to untrusted USB devices. The vulnerability underscores the risks associated with trusting USB devices and the need for strict device control policies in environments where ippusbxd is deployed.

Detailed information about CVE-2024-45062: CWE-121: Stack-based Buffer Overflow in OpenPrinting ippusbxd affecting OpenPrinting ippusbxd. Get real-time updates,

CVE-2024-45062: CWE-121: Stack-based Buffer Overflow in OpenPrinting ippusbxd - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-45062: CWE-121: Stack-based Buffer Overflow in OpenPrinting ippusbxd

Threats Tagged 'cve-2024-45062'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-45062'

Lead Pen Test Professional