보안정보/2020년 5월

2020년 5월 6일 보안정보 스크래핑

키랏 2020. 5. 6. 16:18

2020년 5월 6일 보안정보 스크래핑 

==================================================================== 

+ 주요 취약점 - 특이사항 없음

==================================================================== 

+ 취약점 - Mozilla Firefox 취약점

 1. Mozilla Firefox 취약점
Mozilla Firefox code execution
CVE-2020-12396
- https://exchange.xforce.ibmcloud.com/vulnerabilities/181407

Mozilla Firefox spoofing
CVE-2020-12394
- https://exchange.xforce.ibmcloud.com/vulnerabilities/181406

Mozilla Firefox code execution
CVE-2020-12393
- https://exchange.xforce.ibmcloud.com/vulnerabilities/181405

Mozilla Firefox information disclosure
CVE-2020-12392
- https://exchange.xforce.ibmcloud.com/vulnerabilities/181404

Mozilla Firefox security bypass
CVE-2020-12391
- https://exchange.xforce.ibmcloud.com/vulnerabilities/181403

Mozilla Firefox security bypass
CVE-2020-12390
- https://exchange.xforce.ibmcloud.com/vulnerabilities/181402

Mozilla Firefox buffer overflow
CVE-2020-6831
- https://exchange.xforce.ibmcloud.com/vulnerabilities/181401

Mozilla Firefox security bypass
CVE-2020-12389
- https://exchange.xforce.ibmcloud.com/vulnerabilities/181400

Mozilla Firefox code execution
CVE-2020-12387
- https://exchange.xforce.ibmcloud.com/vulnerabilities/181399

Mozilla Firefox security bypass
CVE-2020-12388
- https://exchange.xforce.ibmcloud.com/vulnerabilities/181398

Mozilla Firefox code execution
CVE-2020-12395
- https://exchange.xforce.ibmcloud.com/vulnerabilities/181397

==================================================================== 

+ 보안이슈 - 코로나19 잠잠? 입사지원서 사칭 악성메일 재출현 외 2건

 1. 코로나19 잠잠? 입사지원서 사칭 악성메일 재출현
바이러스토탈 검진결과 11개 안티 멀웨어 엔진만이 악성파일로 판단
출처: 보안뉴스 https://www.boannews.com/media/view.asp?idx=87998

 2. 또 다른 고 기반 멀웨어 카이지, 중국에서 나타난 IoT 봇넷
중국에서 나타난 카이지, 백지에서부터 개발돼 현재까지도 업그레이드 중
리눅스 기반 장비 노려...멀웨어 개발자들의 관심, 고 언어로 점점 쏠리는가
출처: 보안뉴스 https://www.boannews.com/media/view.asp?idx=87997

 3. 설트의 취약점 두 개 때문에 리니지OS, 고스트, 디지서트에서 사고 발생
설트스택이 관리하는 환경설정 도구인 설트에서 두 가지 취약점 발견됨.
마스터 서버에 연결해 파일 읽기와 쓰기를 자유롭게 하고 비밀 키도 탈취하게 해주는 취약점임.
주말 동안 이 취약점을 통해 리니지OS, 고스트, 디지서트에서 침해 사고 발생함.
출처: 보안뉴스 https://www.boannews.com/media/view.asp?idx=87990

==================================================================== 

저작자표시