Critical RCE Vulnerability Discovered in ClamAV Open-Source Antivirus Software

Critical RCE Vulnerability Discovered in ClamAV Open-Source Antivirus Software

Feb 17, 2023Ravie LakshmananSysadmin / Endpoint Safety

Critical RCE Vulnerability Discovered in ClamAV Open-Source Antivirus Software

Cisco has rolled out protection updates to tackle a important flaw claimed in the ClamAV open up supply antivirus engine that could lead to distant code execution on prone units.

Tracked as CVE-2023-20032 (CVSS score: 9.8), the challenge relates to a case of distant code execution residing in the HFS+ file parser element.

The flaw impacts versions 1.. and previously, .105.1 and earlier, and .103.7 and previously. Google security engineer Simon Scannell has been credited with exploring and reporting the bug.

“This vulnerability is owing to a lacking buffer size verify that may well consequence in a heap buffer overflow write,” Cisco Talos stated in an advisory. “An attacker could exploit this vulnerability by publishing a crafted HFS+ partition file to be scanned by ClamAV on an impacted system.”

Prosperous exploitation of the weak point could empower an adversary to run arbitrary code with the exact same privileges as that of the ClamAV scanning process, or crash the method, ensuing in a denial-of-service (DoS) situation.

The networking tools reported the following items are susceptible –

  • Protected Endpoint, formerly Innovative Malware Security (AMP) for Endpoints (Home windows, macOS, and Linux)
  • Secure Endpoint Non-public Cloud, and
  • Secure Web Equipment, previously World wide web Stability Equipment

It more verified that the vulnerability does not effects Protected Electronic mail Gateway (previously E mail Security Equipment) and Safe Electronic mail and Web Manager (formerly Protection Administration Equipment) goods.

Also patched by Cisco is a distant data leak vulnerability in ClamAV’s DMG file parser (CVE-2023-20052, CVSS rating: 5.3) that could be exploited by an unauthenticated, remote attacker.

“This vulnerability is because of to enabling XML entity substitution that may perhaps outcome in XML external entity injection,” Cisco observed. “An attacker could exploit this vulnerability by distributing a crafted DMG file to be scanned by ClamAV on an influenced system.”

It really is truly worth pointing out that CVE-2023-20052 does not impact Cisco Safe Website Equipment. That mentioned, each vulnerabilities have been dealt with in ClamAV variations .103.8, .105.2, and 1..1.

Cisco independently also settled a denial-of-support (DoS) vulnerability impacting Cisco Nexus Dashboard (CVE-2023-20014, CVSS rating: 7.5) and two other privilege escalation and command injection flaws in E-mail Protection Equipment (ESA) and Secure E mail and Web Manager (CVE-2023-20009 and CVE-2023-20075, CVSS scores: 6.5).

Found this posting appealing? Follow us on Twitter and LinkedIn to browse much more exceptional content material we publish.

US ‘Disruptive Technology’ Strike Force to Target National Security Threats

US ‘Disruptive Technology’ Strike Force to Target National Security Threats

A best U.S. law enforcement official on Thursday unveiled a new “disruptive technology strike drive” tasked with safeguarding American technological know-how from international adversaries and other national safety threats.

Deputy Attorney Normal Lisa Monaco, the No. 2 U.S. Justice Division official, created the announcement at a speech in London at Chatham Home. The initiative, Monaco stated, will be a joint effort involving her division and the U.S. Commerce Section, with a goal of blocking adversaries from “seeking to siphon our most effective technology.”

Monaco also dealt with problems about Chinese-owned video sharing app TikTok.

The U.S. government’s Committee on Overseas Expense in the United States, a impressive national safety system, in 2020 requested Chinese business ByteDance to divest TikTok due to the fact of fears that person data could be handed on to China’s govt. The divestment has not taken spot.

The committee and TikTok have been in talks for additional than two many years aiming to attain a national safety agreement.

“I will be aware I you should not use TikTok, and I would not suggest any person to do so for the reason that of these issues. The base line is China has been quite very clear that they are seeking to mold and put ahead the use and norms all over systems that advance their privileges, their pursuits,” Monaco said.

The Justice Department in the latest many years has more and more centered its endeavours on bringing felony scenarios to protect company mental house, U.S. supply chains and personal info about People in america from foreign adversaries, both through cyberattacks, theft or sanctions evasion.

U.S. law enforcement officials have reported that China by considerably remains the major danger to America’s technological innovation and financial security, a perspective that Monaco reiterated on Thursday.

“China’s doctrine of ‘civil-armed service fusion’ suggests that any advance by a Chinese firm with military application will have to be shared with the state,” Monaco said. “So if a firm operating in China collects your facts, it is a superior wager that the Chinese federal government is accessing it.”

Under previous President Donald Trump’s administration, the Justice Department produced a China initiative tasked with combating Chinese espionage and intellectual property theft.

President Joe Biden’s Justice Division later scrapped the title and re-concentrated the initiative amid criticism it was fueling racism by focusing on professors at U.S. universities in excess of no matter whether they disclosed economical ties to China.

The division did not back away from continuing to pursue nationwide safety circumstances involving China and its alleged endeavours to steal intellectual residence or other American details.

The Commerce Section previous yr imposed new export controls on superior computing and semiconductor parts in a maneuver designed to avert China from attaining particular chips.

Monaco explained on Thursday that the United States “ought to also pay back focus to how our adversaries can use personal investments in their firms to establish the most delicate systems, to gas their drive for a army and nationwide security edge.”

She pointed out that the Biden administration is “exploring how to observe the circulation of personal funds in critical sectors” to be certain it “doesn’t present our adversaries with a national security benefit.”

A bipartisan group of U.S. lawmakers past year identified as on Biden to concern an government get to increase oversight of investments by U.S. companies and men and women in China and other countries.

Save $1,000 on this Alienware gaming laptop with RTX 3070 Ti

Save ,000 on this Alienware gaming laptop with RTX 3070 Ti
God of War running on the Alienware x17 R2 laptop.
Jacob Roach / Digital Developments

You’ll seldom get an possibility to preserve $1,000 when acquiring from gaming notebook offers, so if you’re wondering of acquiring 1, it’s hugely suggested that you just take gain of this provide from Dell for the Alienware x17 R2. The machine is down to $1,900 from $2,900, but we don’t expect shares to previous extended given that this is a constrained-amount deal — it may well be long gone as quickly as tomorrow.

Why you ought to get the Alienware x17 R2 gaming laptop computer

A gaming laptop computer must be ready to keep up with the at any time-raising demands of today’s movie games, in accordance to our laptop acquiring guide. That won’t be an issue with the Alienware x17 R2, which is driven by the 12th-technology Intel Main i9 processor and the Nvidia GeForce RTX 3070 Ti graphics card. It’s also received 16GB of RAM, which our guideline on how substantially RAM do you need to have says is more than enough for most gamers. With these specs, you really do not have to worry about staying not able to enjoy the greatest Pc video games, as well as titles that will launch before long.

The Alienware x17 R2 is outfitted with a 17.3-inch monitor with Complete Hd resolution, for sharp facts and vivid shades when playing video video games. It’s the 1st laptop to provide an absurdly rapidly 480Hz refresh level, for the smoothest movements that you’ll at any time see on a gaming laptop’s display. The Alienware x17 R2 also characteristics the brand’s latest cooling know-how, which will allow you engage in quite a few hrs at a time with out owning to be concerned about overheating and influenced functionality. You’ll have access to the Alienware Command Heart, which will enable you decide on amid five distinctive electric power states relying on what you want to get out of your equipment.

Unlock the miracles of present day movie game titles with the Alienware x17 R2 gaming notebook, which you can now acquire from Dell for $1,900 rather of its original price of $2,900. That is $1,000 in price savings that you can devote on add-ons this sort of as controllers and headsets, or just on extra online video game titles. Even so, given that this is a confined-amount deal, you may perhaps want to finalize the invest in as quickly as possible as stocks of the Alienware x17 R2 gaming laptop computer are most likely previously dwindling.

Editors’ Recommendations






Embrace 2023 by starting your own business and monetizing your passion

Embrace 2023 by starting your own business and monetizing your passion

(BPT) – Now that the new 12 months is underway, it’s time to dream even more substantial. Possibly you want to adjust your special expertise into a aspect hustle. Perhaps you have a passion that you want to pursue comprehensive-time. No make a difference what it is, there’s a sector for various tips and merchandise — you just need to figure out how to bring it to existence and placement it to make revenue.

The key? A custom made web-site. The difficulty? Most people today you should not have intensive internet site layout working experience or the finances to employ another person who does.

Monetizing your strategy starts off with obtaining a higher-excellent site to market and sell your product or services. Luckily, even if you’re not educated in technologies or world wide web structure, you can nevertheless make a site just how you want and get a tailor made domain to bring in consumers and construct your brand.

The straightforward way to develop your have web page

Universe is an app that makes it possible for anyone to generate bold, unique, entirely showcased sites using a grid-primarily based editor and modular, drag-and-fall building blocks. Whilst most website generation instruments originated for desktop personal computers, this a person empowers everyone to develop, handle and update their internet sites on their mobile phone, pill or personal computer — anywhere they are.

The app incorporates all the things from a domain to style and commerce applications, and is fundamentally a organization in a box. Creators can use pre-fabricated templates, but do not have to if they really do not want to really feel constrained in their inventive process. No matter what your vision, you can provide it to lifestyle. You can even build and launch your web page for free of charge!

Universe partners relieve-of-use with adaptability to empower creators and aid them attain their organization ambitions. Just some of the noteworthy characteristics:

  1. Simply personalize your structure
  2. Connection to your other on-line/social profiles
  3. Embed playlists and other media
  4. Customise your qualifications and even contain a video qualifications

Discovering and affording a custom domain

If you want to really brand your business and have a experienced overall look, you need to have a personalized area title. A domain is an integral part of a web site: It’s how you come across a internet site, what you phone it and what locks your brand name into your customers’ reminiscences. A custom domain is a special expression of who you are.

The moment you have got a area, you are set up. Your project’s actual. It is obtained momentum. Even if no just one else understands about it, you manufactured the first transfer, you place yourself out there on the web.

Some corporations enable you make sites and give you a URL that is a subdomain or subdirectory off their most important domain. This choice restricts Web optimization, creating it tougher for folks to uncover your web-site on lookup engines.

Other organizations enable you add a custom made area to the web site you create on their system, but you have to go to some other provider to get and register your area. Then you have to hyperlink every thing together. This is a ton of operate across various applications, so be informed.

Some other firms permit you connect a custom made domain to your internet site for absolutely free for your initial 12 months, but search at the price in that second yr and beyond to make sure the cost is within your price range. Do you really want to invest in creating a lovely site just to be priced out of retaining it on its tailor made, branded area in the upcoming?

With Universe Area+, you can host your internet site on a customized domain for $11.99 for each yr, which equates to much less than $1 for each thirty day period. If it is vital plenty of to set on the net, it’s possibly vital ample to give it a custom area. A site isn’t a web-site devoid of a area. Do your exploration and make a determination that would make perception in the lengthy term given that your target is to build a successful enterprise both of those now and in the future.

Monetizing your small business on your website

Universe is regularly releasing new updates to their commerce and style resources to empower creatives in all places to construct astounding web pages and monetize their passions. These capabilities include things like updates to make textual content-styling and colour palette alternatives far more intuitive for everyone — not just designers!

There is also the “Group Block” element to mix and repeat combinations of web page parts, drive notifications to allow merchants know when they’ve built a sale, and the potential to leverage e-commerce and advertising and marketing equipment like Savings, Google Analytics and the Meta Pixel natively in internet sites designed on Universe.

The Universe platform allows creators consider credit card and Apple Spend payments, market items, handle inventory and print delivery labels all in a person location. If you improve to Universe Professional, you can also get internet site analytics, tailor made domain and e-mail help, mailing list characteristics and so a lot extra to help businesses increase online.

Aspiration huge and established aims for achievements

Resolutions are tough to stick to, but with a web-site designer as intuitive as Universe, you are certain to stick to your objective of lastly beginning the organization you have always wanted. Begin for cost-free and see what you’re truly capable of.

it service clients: IT service clients look for shorter budget cycles

it service clients: IT service clients look for shorter budget cycles
Faced with macroeconomic headwinds, enterprise clients are communicating shorter spending plan cycles to IT expert services providers to make positive assignments are concluded with clear end factors and rigorous timelines, business gurus said.

The consumer ecosystem is sensitive to the fragile financial condition across industries and geographies, and this is getting felt throughout the IT solutions sector.

“For projects with defined start out and close points, this kind of as cloud migrations and stability assessments, we are certainly looking at a shift to shorter-phrase budgeting. This is dominating the target for a great deal of the sector at present,” mentioned Phil Fersht, main executive of IT exploration business HfS Analysis.

Customers are also progressively producing selections on the go.

“The organizing is a lot more on a month-to-month or quarterly foundation, relying on what will work for the shoppers in the existing inflationary surroundings. This is in particular real for new engagements whilst this has not impacted current systems,” mentioned Vivek Agarwal, president, Tech Mahindra.

Tech Mahindra explained during its third quarter results announcement that it was shifting its methodology to make certain that CXOs and chief stakeholders meet regular monthly rather than on a quarterly foundation to properly assess their company demands.

Explore the stories of your curiosity


IT support companies are communicating on a quarterly and regular monthly foundation with clients and top rated leaders to thrust these small-time period mandates.Clientele in the United kingdom are also locking deals at pre-inflationary premiums with IT vendors, Fersht added.

The problem must boost within the following 3-6 months, stated Ray Wang, founder of Constellation Research.

“The modern reduction in workforce by customers of tech businesses has made them glimpse at IT products and services firms as they rebalance their requirements. For non-tech firm purchasers, there is some budgetary strain but numerous of these contracts are very long-time period (3-5-12 months) kinds. New contracts are less than some strain,” Wang stated.

Tata Consultancy Solutions (TCS) chief executive Rajesh Gopinathan mentioned in the course of its Q3 earnings call that the scenario could enhance inside a few months.

“We feel the instant caution that is there will in all probability dissipate a handful of months into the 12 months. In Europe, we will have to wait around for some main celebration to occur for it to change,” he experienced stated.

Stay on best of technological know-how and startup information that issues. Subscribe to our daily e-newsletter for the latest and will have to-examine tech information, shipped straight to your inbox.

We’re starting a position in a cybersecurity stock that’s been in our Bullpen watch list

We’re starting a position in a cybersecurity stock that’s been in our Bullpen watch list

Sakorn Sukkasemsakorn | Istock | Getty Images

We’re initiating a position in Palo Alto Networks (PANW), buying 125 shares at roughly $175 each. Following Wednesday’s trade, Jim Cramer’s Charitable Trust will own 125 shares of PANW, starting its weighting in the portfolio at about 0.73{b7c9e2c88beb1a84f22d94ab877a147f4adc4b3519717f3f957a0f34e16918d1}.

We’re calling up this leader in cybersecurity from the bullpen. We originally added PANW to our “stocks in waiting list,” which we call our Bullpen, last August around $167 per share. Since then, shares of Palo Alto Networks have gained roughly 4{b7c9e2c88beb1a84f22d94ab877a147f4adc4b3519717f3f957a0f34e16918d1} compared to the S&P 500‘s decline of about 1{b7c9e2c88beb1a84f22d94ab877a147f4adc4b3519717f3f957a0f34e16918d1}.

Much like the broader market, PANW went through a nasty decline back in December and has since rallied nicely so far in 2023. But even after this year’s gains, shares are still down from the $180s in late August and the low $200s it reached last April. We think the stock can return to those prior highs in time. 

With earnings on the horizon, we are intentionally starting our PANW position on the smaller side. The company is scheduled to report earnings this coming Tuesday after the closing bell on Wall Street. This buy isn’t a call on the upcoming quarter — but if the stock were to fall for any reason that did not change our positive long-term view, we would greet weakness as an opportunity to bulk up our stake.

Stock Chart IconStock chart icon

hide content

Palo Alto Networks (PANW) 1-year performance

We’re starting a position in Palo Alto Networks because of its leadership in cybersecurity. Earlier this week, Goldman Sachs published a research initiation note on cybersecurity companies. The analysts, who rated Palo Alto with a buy, said they expect “secular tailwinds in security to drive budget growth ahead of broader information technology (IT) spending and broader software over the next decade.” Goldman believes security will continue to take share of total IT and software budgets for three reasons:

  • Security consistently screens as the first priority for investment in Goldman’s bi-annual survey of chief investment officers.
  • Companies need to continue to invest in leading-edge technology to defend against threats.
  • The evolving threat landscape has grown increasingly complex as more companies increase digital transformation projects.

Under this favorable backdrop of spending and Palo Alto Networks’ leading multi-platform approach, Goldman believes the company is positioned for “durable growth” of around 20{b7c9e2c88beb1a84f22d94ab877a147f4adc4b3519717f3f957a0f34e16918d1} for the next five years.

“We believe Palo Alto Networks is furthest along in the industry with executing a multi-platform strategy with technology leadership across several product vectors. Today, we view Palo Alto as a portfolio of network, endpoint and cloud products at different stages of product maturity, each leveraging centralized domain expertise in user interface/user experience (UIUX), marketing, security intelligence and machine learning.”

Cybersecurity isn’t completely immune to the weaker macro environment, but it should be one of — if not the — most resilient areas of enterprise spending. On the previous earnings call, management flagged how deals are starting to face more scrutiny and are taking longer to close. But on a more positive note, Palo Alto said it’s experiencing few deal cancelations. We do not think that changes no matter how tough things get in the economy.

If a threat were to arise, causing disruptions to your business, you don’t want to be the one that left the company vulnerable because you cut back spending on cyber.

Palo Alto Networks is also one of a handful of tech companies that has successfully made the pivot towards emphasizing profitability in this evolving macro environment. Management is doing an excellent job accelerating its efforts to drive incremental operating leverage. They have previously committed to 50 to 100 basis points of operating margin expansion and 100 to 150 basis points of adjusted cash flow margin expansion from fiscal 2022 through 2024.

There also could be a special catalyst on the horizon that could reward shareholders. Thanks to management’s push for profitability, Palo Alto Networks has delivered two consecutive quarters of GAAP (generally accepted accounting principles) profitability. If the next two quarters are also profitable, the company will meet all the requirements to be added to the S&P 500 index. We bring this up because a stock tends to jump when it gets included in the index due to the demand that is created by the mutual funds and exchange-traded funds (ETF) that are forced to buy the stock to keep their track to the index

To be clear, just because a company reports GAAP profits for four consecutive quarters it doesn’t guarantee a spot in the S&P 500. We would never recommend buying a stock solely on this basis. We buy stocks for fundamental reasons. However, the addition of Palo Alto to the index would be a nice bonus for shareholders based on the history of other stocks popping in reaction to the news.

We’re initiating our PANW position with a price target of $200 per share, about 15{b7c9e2c88beb1a84f22d94ab877a147f4adc4b3519717f3f957a0f34e16918d1} higher than current levels, representing roughly 49.5-times fiscal year 2024 earnings-per-share consensus estimates. The knock on PANW is obviously that it is an expensive stock on earnings. But if the company continues to handily beat expectations, then the stock will prove to be much a much better value than what it has appeared. Additionally, as the leader in cybersecurity, it’s consistent 20{b7c9e2c88beb1a84f22d94ab877a147f4adc4b3519717f3f957a0f34e16918d1} grow is more defensible than other areas of tech, which are experiencing problems from economic weakness.

(Jim Cramer’s Charitable Trust is long PAWN. See here for a full list of the stocks.)

As a subscriber to the CNBC Investing Club with Jim Cramer, you will receive a trade alert before Jim makes a trade. Jim waits 45 minutes after sending a trade alert before buying or selling a stock in his charitable trust’s portfolio. If Jim has talked about a stock on CNBC TV, he waits 72 hours after issuing the trade alert before executing the trade.

THE ABOVE INVESTING CLUB INFORMATION IS SUBJECT TO OUR TERMS AND CONDITIONS AND PRIVACY POLICY, TOGETHER WITH OUR DISCLAIMER.  NO FIDUCIARY OBLIGATION OR DUTY EXISTS, OR IS CREATED, BY VIRTUE OF YOUR RECEIPT OF ANY INFORMATION PROVIDED IN CONNECTION WITH THE INVESTING CLUB.  NO SPECIFIC OUTCOME OR PROFIT IS GUARANTEED.