This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

No update since September 2020? Really?

The list of CVEs concerning bugs in the linux kernel is steadily growing, but the rate of updates we're getting for the UTM is in steady decline.

I know that UTM can be considered a dying horse, but nevertheless this thing is still supported and should at least be getting security fixes. None are coming.

What do you guys think about this? Are you as nervous as I am? Or am I simply too nervous about this "well-hardened" security device getting hacked?

What firewall alternatives with a good security track record are you examining?

Regards

Alex

This thread was automatically locked due to age.

Top Replies

FormerMember over 3 years ago in reply to BAlfson +3 suggested

Hi BAlfson , I think this is the link you're looking for: https://lists.astaro.com/ASGV9-IPS-rules.html#221 Thanks,

Parents

0 FormerMember over 3 years ago

Hi asc_,

Thank you for reaching out to the Community!

Would it be possible for you to share the CVEs that you're concerned about? I'd like to followup internally and update you.

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel

0 JosefBergmann over 3 years ago in reply to FormerMember

Are all of these 21 vulnerabilities of exim are covered by the new 9.706 release? There is no evidence in any of the latest "Issues resolved".

https://blog.qualys.com/vulnerabilities-research/2021/05/04/21nails-multiple-vulnerabilities-in-exim-mail-server

CVE	Description	Type
CVE-2020-28007	Link attack in Exim’s log directory	Local
CVE-2020-28008	Assorted attacks in Exim’s spool directory	Local
CVE-2020-28014	Arbitrary file creation and clobbering	Local
CVE-2021-27216	Arbitrary file deletion	Local
CVE-2020-28011	Heap buffer overflow in queue_run()	Local
CVE-2020-28010	Heap out-of-bounds write in main()	Local
CVE-2020-28013	Heap buffer overflow in parse_fix_phrase()	Local
CVE-2020-28016	Heap out-of-bounds write in parse_fix_phrase()	Local
CVE-2020-28015	New-line injection into spool header file (local)	Local
CVE-2020-28012	Missing close-on-exec flag for privileged pipe	Local
CVE-2020-28009	Integer overflow in get_stdinput()	Local
CVE-2020-28017	Integer overflow in receive_add_recipient()	Remote
CVE-2020-28020	Integer overflow in receive_msg()	Remote
CVE-2020-28023	Out-of-bounds read in smtp_setup_msg()	Remote
CVE-2020-28021	New-line injection into spool header file (remote)	Remote
CVE-2020-28022	Heap out-of-bounds read and write in extract_option()	Remote
CVE-2020-28026	Line truncation and injection in spool_read_header()	Remote
CVE-2020-28019	Failure to reset function pointer after BDAT error	Remote
CVE-2020-28024	Heap buffer underflow in smtp_ungetc()	Remote
CVE-2020-28018	Use-after-free in tls-openssl.c	Remote
CVE-2020-28025	Heap out-of-bounds read in pdkim_finish_bodyhash()	Remote

bye Josef

BERGMANN engineering & consulting GmbH, Wien/Austria

0 FormerMember over 3 years ago in reply to JosefBergmann
Hi JosefBergmann,

We'll update the following blog post as the new information becomes available:

Advisory: Multiple Vulnerabilities (AKA 21Nails) in Exim

Thanks,
Cancel
Vote Up +1 Vote Down

Cancel
0 FormerMember over 3 years ago in reply to FormerMember

Hi JosefBergmann,

We've updated the blog post with more information: Advisory: Multiple Vulnerabilities (AKA 21Nails) in Exim.

Thanks,
Cancel
Vote Up +1 Vote Down

Cancel
0 LuCar Toni over 3 years ago in reply to FormerMember

JFYI: The Advisory was updated with the latest information.

__________________________________________________________________________________________________________________
Cancel
Vote Up +1 Vote Down

Cancel

Reply

0 LuCar Toni over 3 years ago in reply to FormerMember

JFYI: The Advisory was updated with the latest information.

__________________________________________________________________________________________________________________
Cancel
Vote Up +1 Vote Down

Cancel

Children

No Data