Thread Info
  • State Suggested Answer
  • +2 person also asked this people also asked this
  • Locked Locked
  • Replies 17 replies
  • Answers 2 answers
  • Subscribers 17 subscribers
  • Views 4176 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

No update since September 2020? Really?

asc_

The list of CVEs concerning bugs in the linux kernel is steadily growing, but the rate of updates we're getting for the UTM is in steady decline.

I know that UTM can be considered a dying horse, but nevertheless this thing is still supported and should at least be getting security fixes. None are coming.

What do you guys think about this? Are you as nervous as I am? Or am I simply too nervous about this "well-hardened" security device getting hacked?

What firewall alternatives with a good security track record are you examining?

Regards

Alex



This thread was automatically locked due to age.
Parents
  • FormerMember
    0 FormerMember

    Hi ,

    Thank you for reaching out to the Community! 

    Would it be possible for you to share the CVEs that you're concerned about? I'd like to followup internally and update you. 

    Thanks,

  • 0 in reply to FormerMember

    Are all of these 21 vulnerabilities of exim are covered by the new 9.706 release? There is no evidence in any of the latest "Issues resolved".

    https://blog.qualys.com/vulnerabilities-research/2021/05/04/21nails-multiple-vulnerabilities-in-exim-mail-server

    CVE Description Type
    CVE-2020-28007 Link attack in Exim’s log directory Local
    CVE-2020-28008 Assorted attacks in Exim’s spool directory Local
    CVE-2020-28014 Arbitrary file creation and clobbering Local
    CVE-2021-27216 Arbitrary file deletion Local
    CVE-2020-28011 Heap buffer overflow in queue_run() Local
    CVE-2020-28010 Heap out-of-bounds write in main() Local
    CVE-2020-28013 Heap buffer overflow in parse_fix_phrase() Local
    CVE-2020-28016 Heap out-of-bounds write in parse_fix_phrase() Local
    CVE-2020-28015 New-line injection into spool header file (local) Local
    CVE-2020-28012 Missing close-on-exec flag for privileged pipe Local
    CVE-2020-28009 Integer overflow in get_stdinput() Local
    CVE-2020-28017 Integer overflow in receive_add_recipient() Remote
    CVE-2020-28020 Integer overflow in receive_msg() Remote
    CVE-2020-28023 Out-of-bounds read in smtp_setup_msg() Remote
    CVE-2020-28021 New-line injection into spool header file (remote) Remote
    CVE-2020-28022 Heap out-of-bounds read and write in extract_option() Remote
    CVE-2020-28026 Line truncation and injection in spool_read_header() Remote
    CVE-2020-28019 Failure to reset function pointer after BDAT error Remote
    CVE-2020-28024 Heap buffer underflow in smtp_ungetc() Remote
    CVE-2020-28018 Use-after-free in tls-openssl.c Remote
    CVE-2020-28025 Heap out-of-bounds read in pdkim_finish_bodyhash() Remote

    bye Josef

    BERGMANN engineering & consulting GmbH, Wien/Austria

Reply
  • 0 in reply to FormerMember

    Are all of these 21 vulnerabilities of exim are covered by the new 9.706 release? There is no evidence in any of the latest "Issues resolved".

    https://blog.qualys.com/vulnerabilities-research/2021/05/04/21nails-multiple-vulnerabilities-in-exim-mail-server

    CVE Description Type
    CVE-2020-28007 Link attack in Exim’s log directory Local
    CVE-2020-28008 Assorted attacks in Exim’s spool directory Local
    CVE-2020-28014 Arbitrary file creation and clobbering Local
    CVE-2021-27216 Arbitrary file deletion Local
    CVE-2020-28011 Heap buffer overflow in queue_run() Local
    CVE-2020-28010 Heap out-of-bounds write in main() Local
    CVE-2020-28013 Heap buffer overflow in parse_fix_phrase() Local
    CVE-2020-28016 Heap out-of-bounds write in parse_fix_phrase() Local
    CVE-2020-28015 New-line injection into spool header file (local) Local
    CVE-2020-28012 Missing close-on-exec flag for privileged pipe Local
    CVE-2020-28009 Integer overflow in get_stdinput() Local
    CVE-2020-28017 Integer overflow in receive_add_recipient() Remote
    CVE-2020-28020 Integer overflow in receive_msg() Remote
    CVE-2020-28023 Out-of-bounds read in smtp_setup_msg() Remote
    CVE-2020-28021 New-line injection into spool header file (remote) Remote
    CVE-2020-28022 Heap out-of-bounds read and write in extract_option() Remote
    CVE-2020-28026 Line truncation and injection in spool_read_header() Remote
    CVE-2020-28019 Failure to reset function pointer after BDAT error Remote
    CVE-2020-28024 Heap buffer underflow in smtp_ungetc() Remote
    CVE-2020-28018 Use-after-free in tls-openssl.c Remote
    CVE-2020-28025 Heap out-of-bounds read in pdkim_finish_bodyhash() Remote

    bye Josef

    BERGMANN engineering & consulting GmbH, Wien/Austria

Children
Unfiltered HTML