By michele654 on Thursday, 03 April 2025
Category: Vulnerabilities

New Vulnerabilities Thursday 03 April


New Alerts for Cisco, Apache Traffic Server, OpenVPN, IBM, and Linux.

Cisco 

A vulnerability in chat messaging features of Cisco Enterprise Chat and Email could allow a remote attacker to cause a DoS. CVSSv3 score of 7.5
More info.

Apache 

Apache Traffic Servr is vulnerable to request smuggling via chunked messages.
More info.

OpenVPN 

OpenVPN in server mode using TLS-crypt-v2 allows remote attackers to trigger a DoS by corrupting and replaying network packets in the early handshake phase.
More info.

IBM 

IBM has published Critical bulletins for Watson Speech Services Cartridge and API Connect.
More info.

Linux 

Amazon Linux 2 and 2023 have updated the kernel. More info. And here.

Security Wizardry Cyber Threat Intelligence - The Radar Page

Security Wizardry Cyber Threat Intelligence - The Mobile Radar Page

SecurityWizardry.com - Vulnerability Details