2019년 12월 6일 보안정보 입니다.

12월 6일 보안정보 입니다.

=================================================

+ 주요 취약점 - Microsoft, 비즈니스 용 Windows Hello에 대한 보안 권고 발표 (CVE-2017-15361) 

1. Microsoft, 비즈니스 용 Windows Hello에 대한 보안 권고 발표(CVE-2017-15361)
[요약]
공격자는 도난 된 개인 키를 사용하여 도메인 내에서 사용자로 인증함으로써 사용자를 가장 할 수 있음.
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV190026

=================================================

+ 취약점 -Apache Olingo 취약점 외 3건

1. Apache Olingo 취약점
** (Apache Olingo는 OData (Open Data Protocol)를 구현하는 Java 라이브러리)
Apache Olingo code execution (CVE-2019-17556)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/172559

Apache Olingo denial of service (CVE-2019-17555)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/172558

Apache Olingo information disclosure (CVE-2019-17554)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/172556

2. AMD ATI Radeon ATIDXX64.DLL shader functionality sincos denial-of-service vulnerability (CVE-2019-5098)
[요약] 
DoS 취약점
- https://talosintelligence.com/vulnerability_reports/TALOS-2019-0890

3. Huawei 제품 취약점
Huawei products denial of service (CVE-2019-5278)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/172607

Huawei products code execution
- https://exchange.xforce.ibmcloud.com/vulnerabilities/172605

Huawei Smartphones security bypass (CVE-2019-5252)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/172604

Huawei Smartphones security bypass (CVE-2019-5250)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/172603

Huawei smartphones directory traversal (CVE-2019-5251)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/172602

Huawei products denial of service (CVE-2019-5253)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/172600

Huawei products denial of service (CVE-2019-5291)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/172599

Huawei products denial of service (CVE-2019-5290)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/172587

Huawei smartphones weak security (CVE-2019-19397)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/172586

Huawei products denial of service (CVE-2019-5248)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/172585

4. Wireshark CMS dissector denial of service (CVE-2019-19553)
[요약]
DoS 취약점
- https://exchange.xforce.ibmcloud.com/vulnerabilities/172579

=================================================

+ 보안정보 - 어베스트와 AVG에서 만든 브라우저 플러그인, 사용자 추적해왔다 외 2건

1. 어베스트와 AVG에서 만든 브라우저 플러그인, 사용자 추적해왔다
[요약]
어베스트와 AVG의 브라우저 플러그인, 사용자 정보 무단 수집 중.
파이어폭스와 오페라는 해당 플러그인 적발해 삭제한 상황.
어베스트는 “보호하기 위해 꼭 있어야 했던 정보”라고 반박.
- https://www.boannews.com/media/view.asp?idx=85001

2. 2년 전 나타난 MS 아웃룩 취약점, 여전히 공격자들의 사랑 받아
[요약]
2년 전 나타나 패치된 아웃룩 취약점, 여전히 활용되고 있음.
레지스트리 조작해 패치를 되돌리는 방법이 개발되었기 때문.
이란의 해킹 단체 둘이 이 취약점을 가장 애용함.
- https://www.boannews.com/media/view.asp?idx=84999

3. 샤문의 후계자? 중동에서 기승부리는 파괴형 멀웨어 제로클리어
[요약]
최근 중동에서 샤문과 닮은 제로클리어 멀웨어 기승 중.
샤문과 제로클리어 모두 마스터 부트 레코드(MBR) 삭제.
중동에서 주로 발생하지만, 사이버 공격은 유행을 타므로 다른 나라도 조심해야 할 것.
- https://www.boannews.com/media/view.asp?idx=85006

=================================================