CISA, FBI call software with buffer overflow issues ‘unforgivable’

Despite “well-documented” fixes, buffer overflow vulnerabilities are quite prevalent, CISA pointed out. “For these reasons — as well as the damage exploitation of these defects can cause — CISA, FBI, and others[1] designate buffer overflow vulnerabilities as unforgivable defects.”

Manufacturers are asked to refer to the methods outlined in the alert PDF issued with the advisory to prevent and mitigate buffer overflow defects, and software users are advised to demand secure products from them that include such preventions.

Microsoft, VMWare, Ivanti flaws called out