Snynet Solution Logo
MON - SUN: 10 AM - 6 PM
+60 11 5624 8319

Blog

SonicWall issues another fix for botched VPN patch

Image Description

SonicWall has been forced to issue another patch to fix a vulnerability that was originally reported in September 2020 and affected over 800,000 SonicWall VPNs.

Originally tagged and treated as CVE-2020-5135, the issue was identified as a critical stack-based Buffer Overflow vulnerability that reportedly could be exploited by remote attackers to execute arbitrary code on the impacted devices, or cause Denial of Service (DoS).

Cybersecurity solutions provider SonicWall released a fix to patch the vulnerability in October 2020. However, as it turns out, the fix wasn’t properly coded and in fact caused a memory dump issue causing SonicWall to get back to the drawing board to address the issue, which has now been fixed.

Craig Young, security researcher at TripWire, who was co-credited along with Nikita Abramov of Positive Technologies, as the discoverer for the CVE-2020-5135 vulnerability, has published a detailed account of his interactions with SonicWall for fixing the “botched fix.”

Better late than never

Young shares that he noticed that something was amiss with the October patch for CVE-2020-5135 and alerted SonicWall on October 6.

“On October 9, SonicWall confirmed my expectation that this was the result of an improper fix for CVE-2020-5135 and told me that the patched firmware versions had already started to become available on mysonicwall.com as well as via Azure,” writes Young.

He claims that although SonicWall had shared an advisory for the patched fix, now tracked as CVE-2021-20019 back in October 2020 itself, it wasn’t until several months later in June 2021 that the advisory was made public and the fix pushed to customers.

  • We've also put together a list of the best VPN solutions available

Via Bleeping Computer

Date

23 Jun 2021

Sources

Share

Other Blog

  • Quick - the Samsung Galaxy Chromebook has a $300 price cut at Amazon

    Getting ready for back to school? Get this thin, backpack-friendly Chromebook for $699 at Amazon.

    Read More

  • Microsoft Excel is getting a whole lot more customization

    Microsoft is expanding is spreadsheet software with the addition of a new API which will allow developers to create their own custom data types in Excel.

    Countless solutions have been built in Excel using just text and numbers but over the course of its multi-year journey, the software giant has expanded the types of data users can work with natively in its software. This began with the introduction of Microsoft's Stocks and Geography “data types” back in 2018 and these linked data types allow for a single cell in a spreadsheet to contain a live, connected and rich set of information about objects like stocks, currencies, cities and countries.

    Last year though, Microsoft expanded on this vision by allowing customers to work with their own data as a data type. As a result, it became possible to automatically connect data from its Power BI business intelligence tool with Excel and this integration made published Power BI data discoverable in Excel as a structured data type.

    Now Microsoft is taking linked data types to a whole new level yet again with the introduction of a new JavaScript API in Excel.

    Custom data types

    With its new JavaScript API in Excel which will be available in preview later this month, Microsoft is making it possible for developers to create their own custom data types.

    These new custom data types can contain images, entities, arrays and formatted number values all backed by their own custom data sources. These new Excel data types can also be used as both inputs and outputs.

    Now developers will able to organize complex data as objects and present this data to users in more natural ways while still providing easy access to the full information users require for analysis or reporting according to a new blog post from Microsoft.

    Excel users can also create their own add-ins or extend previously existing ones to utilize the power of data types. Custom data types can even be shared across an entire organization and add-ins or other solutions can be created that are capable of connecting data types to a company's own service or data.

    Microsoft's new Javascript API will be available in public preview when the next version of the Office.JS Preview APIs are deployed near the end of this month. However, to create custom data types, users will need the Office.JS Preview API along with an Insiders Beta build of Excel for Windows or Mac.

    We've also highlighted the best spreadsheet software and the best business intelligence tools

    Read More

  • Nvidia GeForce Now RTX 3080-powered membership opens for pre-orders

    Nvidia GeForce Now just took a big step forward, and now all gamers out there can pre-order its recently revealed new top-tier streaming service.

    Previously, the RTX 3080 subscription was only available in early access to Founders and Priority members (in the US and Europe), but now anyone can jump on the bandwagon and pre-order the faster streaming offering.

    As the name suggests, the RTX 3080 membership allows you to stream from one of Nvidia's rigs armed with a 3080 graphics card. That enables resolutions of up to 1440p at up to 120 frames per second (fps) on PCs or Macs (compared to 1080p and 60 fps for Priority members), or 4K HDR on Shield TV at 60 fps.

    The maximum session length is also extended for RTX 3080 subscribers and runs to eight hours instead of six.

    A six-month subscription will run you $99.99 (around £75, AU$135) with Nvidia noting that there are only a limited number of memberships available for this tier. Founders who are upgrading get a 10% discount, incidentally, and maintain their status and benefits (and can revert to their original plan if they wish, as long as they don’t miss any subscription payments).

    As mentioned, this is just in the pre-order phase now, with the RTX 3080 memberships going live in November for the US, and December for Europe.

    Other announcements for this week’s GeForce Now Thursday include the arrival of a hot new gaming property on Nvidia’s streaming service: Marvel’s Guardians of the Galaxy. The game boasts support for RTX On, meaning you get ray-tracing and DLSS for speedier frame rates (if you’re a subscriber).

    Other games now live for Nvidia’s cloud gaming service are Riders Republic and Alan Wake Remastered, along with a couple of more obscure offerings: Hide and Shriek, plus Paradise Killer.

    Analysis: Dream stream? Just make sure your connection is up to the task

    Nvidia’s GeForce Now is gathering considerable momentum, with some impressive new games coming to the service (including recent introductions from EA) which now boasts over 2,000 titles in its library.

    That’s all good, of course, and a new flagship tier is a very welcome option, and reasonably enough priced given the upgrades here. Streaming at 1440p, and indeed 120 fps, should make for a much more compelling visual experience and fluid gameplay; but as ever the proof will be in the pudding.

    We all know that streaming transfers the gaming demands from your device to your internet connection, and you’ll need a chunkier level of bandwidth to make the most of streaming at a higher quality – just the same as you need more bandwidth to stream 4K shows to your 4K TV from, say, Netflix.

    There are undeniable strides forward being made by Nvidia here, then, and as more gamers get the benefit of ultra-fast connections, this new tier will doubtless become more widely used (remember, there are only a limited amount of available subs to begin with, anyway).

    Read More

  • Why I think Apple Maps could help solve the Safari redesign in iOS 15

    Opinion: The new designs of Safari in iOS 15 and macOS 12 have been polarizing, but Maps could save the day.

    Read More

Find Out More About Us

Want to hire best people for your project? Look no further you came to the right place!

Contact Us