Security News > 2023 > June > U.S. Cybersecurity Agency Adds 6 Flaws to Known Exploited Vulnerabilities Catalog

The U.S. Cybersecurity and Infrastructure Security Agency has added a batch of six flaws to its Known Exploited Vulnerabilities catalog, citing evidence of active exploitation.

This comprises three vulnerabilities that Apple patched this week, two flaws in VMware, and one shortcoming impacting Zyxel devices.

CVE-2023-32434 and CVE-2023-32435 are two of many vulnerabilities in iOS that have been abused in the espionage attack.

Take control of your attack surface with NetSPI's Attack Surface Management.

The development comes as CISA issued an alert warning of three bugs in the Berkeley Internet Name Domain 9 Domain Name System software suite that could pave the way for a denial-of-service condition.

The flaws - CVE-2023-2828, CVE-2023-2829, and CVE-2023-2911 - could be exploited remotely, resulting in the unexpected termination of the named BIND9 service or exhaustion of all available memory on the host running named, leading to DoS. This is the second time in less than six months that the Internet Systems Consortium has released patches to resolve similar issues in BIND9 that could cause DoS and system failures.

News URL

https://thehackernews.com/2023/06/us-cybersecurity-agency-adds-6-flaws-to.html