Unsupported Host OS

About EOS Software

Software systems are very much like living things; they grow and evolve as time goes by. Years, sometimes decades pass, and software products continue to receive new updates, and adapt to the changing technological landscapes.

But much like living things, every piece of software has an expiration date. Beyond this expiration date, the vendor does not release any more updates or patches for the software. This stage of the product lifecycle is known as end-of-support (EOS).

Once a product has been marked for EOS, it’s no longer safe to use. This is because the vendor will not be fixing any subsequently discovered vulnerabilities or bugs in it. Additionally, any newly released applications may also not be compatible with EOS software.

Just like any other software product, operating systems also hit end-of-support. Running an EOS operating system poses a serious security risk to your infrastructure.

Cloud Risk Description

Malicious actors can scan a network to detect any end-of-support operating systems. If the OS has any known vulnerabilities or bugs, they can be exploited to gain unauthorized control over the system. Since an operating system has exclusive access to all the applications, the damages can sometimes be irreparable. 

How Can Orca Help?

Orca discovers neglected workloads, i.e., machines running an unpatched or unsupported OS, as shown in the above screenshot. In addition, Orca alerts you to a host operating system reaching EOS in less than 90 days to enable you to upgrade the OS before the EOS date.

Related Risks

• Unpatched host operating system: An unpatched OS is one that’s missing critical security updates or patches for known vulnerabilities. Adversaries can exploit these vulnerabilities to compromise the entire system.

Recommended Mitigation Strategies

• 

  If an operating system has been marked for EOS, upgrade to a newer version before the deadline.

• 

  Use trackers like https://endoflife.software/ and https://www.upcomingeol.com/ to keep tabs on software about to hit EOS.

Useful Links

• 2022 State of Public Cloud Security Report: https://orca.security/lp/2022-state-public-cloud-security-report/
• Risks of using end-of-life software: https://blog.cloudlinux.com/5-risks-of-using-end-of-life-operating-system
• Benefits of replacing legacy systems: https://dynamics.folio3.com/blog/legacy-system/
• End of support software tracker: https://endoflife.software/