Уровень 0 · материалов: 3
В кластер входят документы, описывающие конкретные уязвимости безопасности и способы их устранения, но не входят общие руководства по поиску и устранению технических неисправностей.
Общие признаки: критические уязвимости (CVE), инструкции по обновлению, системное администрирование Linux, устранение угроз безопасности
Группа выше: Уязвимости конкретных продуктов и платформ
Смысл: The main idea is to warn system administrators and home users about a severe vulnerability in Samba (CVE-2017-7494) that enables remote hijacking of Linux/Unix servers and NAS devices, and to provide immediate remediation steps.
A critical remote code execution vulnerability in Samba (CVE-2017-7494) threatens Linux/Unix systems and NAS devices, necessitating urgent updates or configuration changes to prevent potential ransomware attacks.
Смысл: The text warns about a critical local privilege escalation vulnerability (CVE-2013-2094) in various Linux kernels, affecting major distributions like Ubuntu, Debian, and RHEL/CentOS, and urges administrators to update their systems.
A critical zero-day exploit has been released for Linux kernels 2.6.37 to 3.8.10, allowing local users to gain root access across major server distributions.
Смысл: The text serves as an emergency warning and community-driven recovery manual for system administrators whose Exim mail servers are vulnerable to CVE-2019-10149. The main idea is that immediate updating to version 4.92 is mandatory to prevent total server compromise, and for those already infected, a multi-step cleaning process involving crontab, SSH configs, and mail queue purging is necessary, though a clean reinstall is the only guaranteed fix.
Urgent call to update Exim to version 4.92 due to a critical remote code execution vulnerability (CVE-2019-10149) currently being exploited by bots.