EGI CSIRT
Computer Security Incident Response Team
MISSION
EGI CSIRT coordinates operational security activities within the EGI Infrastructure to deliver a secure and stable infrastructure, giving scientists and researchers the protection and confidence they require to safely and effectively carry out their research.
CONTACTS
To report a security incident:
- EGI data centres: follow SEC01 and report an incident
- Everyone else: abuse@egi.eu
To report a software vulnerability:
- report-vulnerability@egi.eu or use this web form
(don’t discuss on open forums)
Or contact us via email
WHAT WE DO
- Prevention of security incidents (security monitoring, software vulnerability handling, risk assessment and mitigation)
- Incident response
- Security policy and procedures
- Security Trainings
TRAININGS
Keeping the EGI infrastructure secure requires an understanding of attack and defense techniques that goes beyond the average skill set of system administrators. Security training is vital to guarantee that local teams are able to use available information for a complete incident response. EGI CSIRT has a diverse catalogue of training modules, developed by the team or by partner institutions.
Use-after-free privilege escalation vulnerability in Linux kernel (CVE-2021-3715)
High-risk vulnerability in Linux kernel's Traffic Control networking system has been found that can lead to a use-after-free condition. You can mitigate this vulnerability by disabling unprivileged network namespaces. Details about this vulnerability can be found in...
Sequoia Privilege escalation in Linux file system CVE-2021-33909
A vulnerability has been reported which may allow unprivileged users to gain root access, via the crafting of a long path name in the file system. Qualys have announced that their exploit has been released, therefore EGI CSIRT considers this vulnerability as critical...
