Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

libarchive

execute_filter_delta in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst.

CVE-2024-48958 is a memory safety vulnerability classified under CWE-125 (Out-of-bounds Read) found in libarchive, an open-source library widely used for reading and writing various archive formats, including RAR. The flaw exists in the execute_filter_delta function within the archive_read_support_format_rar.c source file. The vulnerability arises because the source pointer (src) can move beyond the destination pointer (dst) during the processing of a crafted RAR archive file, leading to out-of-bounds memory access. This improper pointer manipulation can cause memory corruption, potentially allowing an attacker to execute arbitrary code, crash the application, or leak sensitive information. The CVSS 3.1 base score is 7.8, indicating high severity, with the vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. This means the attack requires local access (local vector), low attack complexity, no privileges, but does require user interaction (opening a malicious archive). The scope is unchanged, but the impact on confidentiality, integrity, and availability is high. Although no exploits are currently known in the wild and no official patches have been linked, the vulnerability affects all libarchive versions prior to 3.7.5. Given libarchive's widespread use in many Linux distributions, backup tools, and software that handle compressed archives, this vulnerability poses a significant risk. Attackers could craft malicious RAR files that, when opened by vulnerable software, trigger the out-of-bounds access and potentially gain code execution or cause denial of service.

Detailed information about CVE-2024-48958: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-48958: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-48958: n/a

Threats Tagged 'cve-2024-48958'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-48958'

Lead Pen Test Professional