Threat Source Newsletter (May 6, 2021)

Summary: Cisco Talos reported an information disclosure vulnerability, CVE-2020-28588, in the /proc/pid/syscall functionality of 32-bit ARM devices running Linux, which could let an attacker view kernel stack memory by reading a legitimate OS file. Cisco also disclosed multiple vulnerabilities in its Adaptive Security Appliance software and Firepower Threat Defense, including high-severity CVE-2021-1493, where a malicious HTTP request could cause a buffer overflow that discloses data fragments or reloads the device into a denial-of-service condition.
What you should know: The Linux flaw is read through a legitimate OS file, which Talos says makes it impossible to detect on a network remotely, and the ASA buffer overflow can take a device down with a single crafted HTTP request.

Read the original at Cisco Talos ↗

Topics: Malware
Mentions: CVE-2020-28588 CVE-2021-1493
Related: Vulnerability Spotlight: Information disclosure vulnerability in the Linux Kernel Cyber Risks ·
Vulnerability Spotlight: Use-after-free vulnerability in Foxit PDF Reader Cyber Risks ·
ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026