ZeroHour
Security Affairspublished ()ingested @securityaffairs

Security Affairs most

criticalRansomwareimportance 60CVE-2021-33909

Vulnerabilities mentionedAll →

CVEVulnerabilityCVSSEPSSFlagsAffectedExposurePublished
CVE-2021-33909
fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of

fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of-bounds Write, and escalation to root by an unprivileged user, aka CID-8cae8cd89f05.

NVD description · AI analysis pending
7.810% PoC ×2
  • linux linux kernel
  • linux fedora
  • linux debian linux
  • +1 more
Full article352 words · extracted from securityaffairs.com · click to collapse

Which are the most-read cyber stories of 2021? This post includes Top Posts for the last 365 days.

Why Edward Snowden is urging users to stop using ExpressVPN?

The popular whistleblower Edward Snowden recommends customers of ExpressVPN VPN service to stop using it.

Two kids found a screensaver bypass in Linux Mint

The development team behind the Linux Mint distro has fixed a security flaw that could have allowed users to bypass the OS screensaver.

COMB breach: 3.2B email and password pairs leaked online

The Largest compilation of emails and passwords (COMB), more than 3.2 billion login credentials, has been leaked on a popular hacking forum.

LPE flaw in Linux kernel allows attackers to get root privileges on most distros

Experts discovered a Local Privilege Escalation, tracked as CVE-2021-33909, that could allow attackers to get root access on most Linux distros.

Hacking Nespresso machines to have unlimited funds to purchase coffee

Some commercial Nespresso machines that are used in Europe could be hacked to add unlimited funds to purchase coffee.

New Golang-based Crypto worm infects Windows and Linux servers

Experts from Intezer discovered a new and self-spreading Golang-based malware that targets Windows and Linux servers.

Experts found three new 15-year-old bugs in a Linux kernel module

Three 15-year-old flaws in Linux kernel could be exploited by local attackers with basic user privileges to gain root privileges on vulnerable Linux systems.

Data of 533 million Facebook users leaked in a hacking forum for free

On April 3, a user has leaked the phone numbers and personal data of 533 million Facebook users in a hacking forum for free online.

Accenture has been hit by a LockBit 2.0 ransomware attack

Global consulting giant Accenture has allegedly been hit by a ransomware attack carried out by LockBit 2.0 ransomware operators.

A zero-day exploit for Log4j Java library could have a tsunami impact on IT giants

Experts publicly disclose Proof-of-concept exploits for a critical zero-day vulnerability in the Apache Log4j Java-based logging library.

Follow me on Twitter: @securityaffairs and Facebook

[adrotate banner=”9″][adrotate banner=”12″]

Pierluigi Paganini

(SecurityAffairs – hacking, cyber stories)

[adrotate banner=”5″]

[adrotate banner=”13″]



Text extracted automatically; images, tables and formatting may be missing. Original: https://securityaffairs.com/126198/breaking-news/security-affairs-most-read-cyber-stories-of-2021.html