Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Critical Patches available for Anti-malware scan engine failure due to specific malware characteristics [CVE-2015-6950]

    • Updated:
    • 17 Dec 2015
    • Product/Version:
    • Deep Security 9.5
    • Platform:
    • Linux - Red Hat RHEL 5 32-bit
    • Linux - Red Hat RHEL 5 64-bit
    • Linux - Red Hat RHEL 6 32-bit
    • Linux - Red Hat RHEL 6 64-bit
    • Linux - SuSE 10
    • Linux - SuSE 10 64-bit
    • Linux - SuSE 11
    • Linux - SuSE 11 64-bit
Summary

Trend Micro has been made aware of a vulnerability in Deep Security 9.5 for Linux where the Real-time Anti-malware scan engine could potentially fail to detect malware if it is located in a directory location with certain specific characteristics.

Details
Public

To address this issue, Trend Micro has released Deep Security Manager (DSM) 9.5 Service Pack (SP) 1 Critical Patch Release 9.5.5602 and Deep Security Agent (DSA) 9.5 SP 1 Critical Patch Release 9.5.3.2765. All customers using Real-Time Anti-Malware scanning are recommended to apply these critical patches as soon as possible.

Download the critical patches for DSM and DSA from Trend Micro Download Center. Under Server and Storage, select the Deep Security product and then go to the Product Patch tab. Installation instructions and other important information can be found in the readme file that is available from the same location as the patches.

Trend Micro would like to credit Nathan Young of the eSecure Security Assurance team for the responsible disclosure of the issues addressed in this advisory.

Premium
Internal
Rating:
Category:
Update
Solution Id:
1108439
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.


Need More Help?

Create a technical support case if you need further support.