Malwarecritical

Apache ActiveMQ bug exploited to deliver Kinsing malware

Help Net Securityby @helpnetsecurityNov 21, 2023 · 00:00 UTC (Nov 21, 2023)1 min read3

Read at helpnetsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-46604 CVE-2023-4911

Tags: cve-2023-46604 cve-2023-4911 malware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-46604	Unauthenticated RCE in Apache ActiveMQ via OpenWire Deserialization	9.8	100%	KEVRansomwarePoC	Oct 27, 2023 KEV Nov 2, 2023
CVE-2023-4911	Buffer Overflow in GNU C Library ld.so Grants Root via SUID Binaries	7.8	64%	KEVPoC ×6	Oct 3, 2023 KEV Nov 21, 2023

From the original article

1 min read at helpnetsecurity.com

Attackers are exploiting a recently fixed vulnerability (CVE-2023-46604) in Apache ActiveMQ to install Kinsing malware and cryptocurrency miners on targeted Linux systems. Apache ActiveMQ is a popular Java-based open source message broker that allows communication between applications and services by translating messages exchanged via different protocols (OpenWire, STOMP, MQTT, AMQP, etc.)

Help Net Security

By @helpnetsecurity · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.