CVE STALKER
ALL DAILY MONTHLY PAST 7 DAYS PAST 30 DAYS 🔍

CVE-2023-2868

CVSS
DESCRIPTIONA remote command injection vulnerability exists in the Barracuda Email Security Gateway (appliance form factor only) product effecting versions 5.1.3.001-9.2.0.006. The vulnerability arises out of a failure to comprehensively sanitize the processing of .tar file (tape archives). The vulnerability stems from incomplete input validation of a user-supplied .tar file as it pertains to the names of the files contained within the archive. As a consequence, a remote attacker can specifically format these file names in a particular manner that will result in remotely executing a system command through Perl's qx operator with the privileges of the Email Security Gateway product. This issue was fixed as part of BNSF-36456 patch. This patch was automatically applied to all customer appliances.
HEAT SCORE127

WORDS

TWEETS

DATE TWEETS USER
2023-05-29 13:00:36CVE-2023-2868 is a remote command injection vulnerability in the Barracuda ESG appliance. The vulnerability exists… https://t.co/iFqnkeaxS5 https://twitter.com/i/web/status/1663167151388217346PhishNewsMedia
2023-05-28 16:41:19CISAの悪用が確認されている脆弱性に1件の追加。 追加されたのは、Barracuda Email Security Gatewayの.tarファイル処理におけるインジェクションの脆弱性（CVE-2023-2868）です。 影… https://t.co/GvswxpicD4 https://twitter.com/i/web/status/1662860351292198918ntsuji
2023-05-28 13:00:15Top 3 trending CVEs on Twitter Past 24 hrs: CVE-2023-2868: 333.7K (audience size) CVE-2023-28771: 330.2K CVE-2023-… https://t.co/MH1LGCpdt7 https://twitter.com/i/web/status/1662805934366760960CVEtrends
2023-05-27 20:00:15CVE-2023-2868 Baracuda e-type storrage RCE in perl operator. Промышленная бигдата в опасности, внимание… https://t.co/6aD1PCJEmC https://twitter.com/i/web/status/1662547818542772225bytecodevm
2023-05-27 13:00:12Top 3 trending CVEs on Twitter Past 24 hrs: CVE-2023-2868: 678.7K (audience size) CVE-2023-2825: 177.9K CVE-2023-2… https://t.co/iS5z6VDR6E https://twitter.com/i/web/status/1662443547771957248CVEtrends
2023-05-26 23:20:32Barracuda NetworksのEmail Security Gatewayアプライアンスの脆弱性(CVE-2023-2868)、CISAのカタログに追加。リモートからシステムコマンドの実行が可能な脆弱性で、パッチは今週初め… https://t.co/dZvMpsJZhJ https://twitter.com/i/web/status/1662236795172470785ishizuki
2023-05-26 22:31:05#Vulnerability #CISA CISA Adds CVE-2023-2868 Vulnerability to KEV Catalog https://t.co/E5MWVmoOeg https://securityonline.info/cisa-adds-cve-2023-2868-vulnerability-to-kev-catalog/?utm_source=dlvr.it&utm_medium=twitterKomodosec
2023-05-26 22:00:16- CVE-2023-2868 Barracuda Networks ESG Appliance Improper Input Validation Vulnerabilityfoxbook
2023-05-26 18:36:29CVE-2023-2868 - Barracuda Networks ESG Appliance Improper Input Validation Vulnerability has been added to the KEV catalog.KEV_bot_1
2023-05-26 18:30:59CISA Adds CVE-2023-2868 Vulnerability to KEV Catalog https://t.co/jrjkplKRnh #infosec #security #pentesting https://securityonline.info/cisa-adds-cve-2023-2868-vulnerability-to-kev-catalog/the_yellow_fall
2023-05-26 17:20:47🚧 @CISAgov added #CVE-2023-2868 to the Known Exploited Vulnerabilities Catalog. Keep up with 🆕 additions & protect… https://t.co/JSw4ieZI8q https://twitter.com/i/web/status/1662145459756974094CISACyber
2023-05-26 14:42:12🔒 Alert: Barracuda warns of zero-day exploit targeting Email Security Gateway (ESG) appliances. CVE-2023-2868 allow… https://t.co/DXDq8X3Wzh https://twitter.com/i/web/status/1662105498563547136Intect6
2023-05-26 06:10:20Barracuda identified a vulnerability (CVE-2023-2868) in our Email Security Gateway appliance (ESG) https://t.co/R9CY8qPSPM https://status.barracuda.com/incidents/34kx82j5n4q9_r_netsec
2023-05-26 05:00:13Secure your network immediately! Barracuda warns of zero-day flaw tracked as CVE-2023-2868 that affects versions 5.… https://t.co/1n1qdm9F1b https://twitter.com/i/web/status/16619593107784581130xedeon
2023-05-26 02:20:27Zero-Day Vulnerability CVE-2023-2868 Exploited to Hack Barracuda Email Security Gateway Appliances https://t.co/toDnDnpojc https://www.securityweek.com/zero-day-vulnerability-exploited-to-hack-barracuda-email-security-gateway-appliances/SecurityWeek
2023-05-26 02:20:12SecurityWeek: Zero-Day Vulnerability CVE-2023-2868 Exploited to Hack Barracuda Email Security Gateway Appliances https://t.co/jCr9ImeyR1 https://www.securityweek.com/zero-day-vulnerability-exploited-to-hack-barracuda-email-security-gateway-appliances/MrsYisWhy
2023-05-25 17:33:18CVE-2023-2868, a zero-day exploited to hack some Email Security Gateway (ESG) appliances. https://t.co/L5YagYqslW f… https://t.co/o66HlBqRfA https://status.barracuda.com/ https://twitter.com/i/web/status/1661785966011461636emailmp
2023-05-25 13:14:14Top 3 trending CVEs on Twitter Past 24 hrs: CVE-2023-2868: 556.6K (audience size) CVE-2023-28274: 412.3K CVE-2023-… https://t.co/Fl1ZKN5SQP https://twitter.com/i/web/status/1661718770895712256CVEtrends
2023-05-25 11:51:17Barracuda email #security appliances #hacked via zero-day #vulnerability (CVE-2023-2868) https://t.co/WfRqkoGV26 #HelpNetSecurity https://www.helpnetsecurity.com/2023/05/25/cve-2023-2868/SecurityNewsbot
2023-05-25 11:42:05#Barracuda identified a vulnerability (CVE-2023-2868) in our Email Security Gateway appliance (#ESG) on May 19, 202… https://t.co/f6ziG0sDgQ https://twitter.com/i/web/status/1661697874244120576domineefh
2023-05-25 11:41:22Barracuda email security appliances hacked via zero-day vulnerability (CVE-2023-2868) #cybersecuritynews #netsec… https://t.co/3YtlRfF0kW https://twitter.com/i/web/status/1661698012886999041Xc0resecurity
2023-05-25 11:21:09Barracuda email security appliances hacked via zero-day vulnerability (CVE-2023-2868) https://t.co/r1IzrBICWh https://www.itsecuritynews.info/barracuda-email-security-appliances-hacked-via-zero-day-vulnerability-cve-2023-2868/IT_securitynews
2023-05-25 10:55:46Barracuda email security appliances hacked via zero-day vulnerability (CVE-2023-2868): A vulnerability (CVE-2023-28… https://t.co/IsPoD4xwz5 https://twitter.com/i/web/status/1661684679131684864cipherstorm
2023-05-25 10:55:21Barracuda email security appliances hacked via zero-day vulnerability (CVE-2023-2868) #HelpNetSecurity… https://t.co/fbSHFQ0711 https://twitter.com/i/web/status/1661684809188642819PoseidonTPA
2023-05-25 10:54:06Barracuda email security appliances hacked via zero-day vulnerability (CVE-2023-2868) https://t.co/aJTpMypsAL… https://t.co/2FZgrqIq8A https://ift.tt/8NwpiTS https://twitter.com/i/web/status/1661684843065778176SK_Expert
2023-05-25 10:20:48Barracuda Networks is warning customers about CVE-2023-2868, a zero-day exploited to hack some Email Security Gatew… https://t.co/nAZ42HpETW https://twitter.com/i/web/status/1661677991024529408EduardKovacs
2023-05-25 10:00:58Barracuda email security appliances hacked via zero-day vulnerability (CVE-2023-2868): A vulnerability (CVE-2023-28… https://t.co/0QKpVTNmPp https://twitter.com/i/web/status/1661671720837849088shah_sheikh
2023-05-25 10:00:49Barracuda email security appliances hacked via zero-day vulnerability (CVE-2023-2868) - https://t.co/auQIRHssbA -… https://t.co/egjlbNi61j https://www.helpnetsecurity.com/2023/05/25/cve-2023-2868/ https://twitter.com/i/web/status/1661672481030041600helpnetsecurity
2023-05-25 10:00:41Zero-Day Vulnerability CVE-2023-2868 Exploited to Hack Barracuda Email Security Gateway Appliances https://t.co/toDnDnoQtE https://www.securityweek.com/zero-day-vulnerability-exploited-to-hack-barracuda-email-security-gateway-appliances/SecurityWeek
2023-05-25 10:00:22SecurityWeek: Zero-Day Vulnerability CVE-2023-2868 Exploited to Hack Barracuda Email Security Gateway Appliances https://t.co/jCr9ImeyR1 https://www.securityweek.com/zero-day-vulnerability-exploited-to-hack-barracuda-email-security-gateway-appliances/MrsYisWhy
2023-05-25 08:32:25CVE-2023-2868 : BARRACUDA EMAIL SECURITY GATEWAY UP TO 9.2.0.006 TAR FILE COMMAND INJECTION https://t.co/IXDFfG8gns https://prophaze.com/cve/cve-2023-2868/prophaze
2023-05-25 06:11:20CVE-2023-2868 (CVSS:9.4, CRITICAL) is Received. A remote command injection vulnerability exists in the Barracuda Em… https://t.co/mfsebAD7ux https://twitter.com/i/web/status/1661613144312250368cracbot
2023-05-25 03:40:14Barracuda Email Security Gatewayアプライアンスのゼロデイ脆弱性(CVE-2023-2868)が開示された。5/20-21修正。被害規模は明らかにされていない。NISTによると、ユーザから提示されたT… https://t.co/rLtj7jkCYH https://twitter.com/i/web/status/1661576822474305537__kokumoto
2023-05-24 20:21:48New post from https://t.co/uXvPWJy6tj (CVE-2023-2868) has been published on https://t.co/iYq5vGzIfI http://www.sesin.at https://www.sesin.at/2023/05/24/cve-2023-2868/WolfgangSesin
2023-05-24 20:21:30New post from https://t.co/9KYxtdZjkl (CVE-2023-2868) has been published on https://t.co/TcrnamhBA2 http://www.sesin.at https://www.sesin.at/2023/05/24/cve-2023-2868/www_sesin_at
2023-05-24 20:21:11New post from https://t.co/uXvPWJy6tj (CVE-2023-2868 | Barracuda Email Security Gateway up to 9.2.0.006 TAR File co… https://t.co/VXJLBRQbS8 http://www.sesin.at https://twitter.com/i/web/status/1661466051140354048WolfgangSesin
2023-05-24 20:20:54New post from https://t.co/9KYxtdZjkl (CVE-2023-2868 | Barracuda Email Security Gateway up to 9.2.0.006 TAR File co… https://t.co/XvroND9bjE http://www.sesin.at https://twitter.com/i/web/status/1661466053283569665www_sesin_at
2023-05-24 19:41:37#BarracudaESG Alert! A zero-day vulnerability (CVE-2023-2868) was exploited and has been patched. If impacted, chec… https://t.co/l1TiV8B0CO https://twitter.com/i/web/status/1661455045051793408mstfknn
2023-05-24 19:40:40Barracuda identificó una vulnerabilidad (CVE-2023-2868) en nuestro dispositivo Email Security Gateway (ESG) -… https://t.co/kyfZ1GBr2a https://twitter.com/i/web/status/1661456413439283215luiscosio
2023-05-24 19:13:04CVE-2023-2868 A remote command injection vulnerability exists in the Barracuda Email Security Gateway (appliance fo… https://t.co/qnqG8saq9v https://twitter.com/i/web/status/1661447067351367680CVEnew