By michele654 on Wednesday, 19 April 2023
Category: Vulnerabilities

New Vulnerabilities Wednesday 19 April


New Alerts for F5, vm2, Google Chrome (Exploit), and Linux.

F5 

BIG-IP Next SPK and F5OS contain a vulnerability in urllib3 that allows a remote attacker to inject additional HTTP headers via the HTTP method and perform a smuggling attack and/or allow a client to bypass HTTP headers with security purpose. Highest CVSSv3 score of 6.5.
More info.

vm2 

a vulnerability in exception sanitization of vm2 allows a remote attacker to raise an unsanitized host exception inside which can be used to escape the sandbox and run arbitrary code in host context. CVSSv3 score of 9.8
More info.

Google Exploit

Google has updated Chrome for Desktop to fix 8 security vulnerabilities. At least one is exploited in the wild.
More info.

Linux 

SUSE has updated the kernel. More info.
Red Hat has updated the kernel. More info.
Ubuntu has updated the kernel. More info.

Security Wizardry Cyber Threat Intelligence - The Radar Page

Security Wizardry Cyber Threat Intelligence - The Mobile Radar Page

SecurityWizardry.com - Vulnerability Details

Leave Comments