-
Commonplace, smartphone OS vulnerability (22nd Dec 2022)
Preface: The software writes data past the end, or before the beginning, of the intended buffer. Typically, this can result in corruption of data, a crash, or code execution. Background: In the Android system, an application has at least one process, and each process has its own independent resources and memory space. Other processes cannot…
-
CVE-2022-43875 It looks like the flaw is not in cyber security. This is a design flaw. (21st Dec 2022)
Preface: Long time ago, blockchain developers announcement that they have developed a blockchain platform to launch a digital system for international payments capable of replacing the global Swift system. Seems they are not successful. Background: IBM FTM for swift services is certified real-time SWIFT messaging interface. Ensure faster payments in addition to SWIFT without changing…
-
CVE-2022-46400 Microchip RN4870 module firmware 1.43 (19th Dec 2022)
Preface: There are two types of paring base on BLE version: Background: The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) allows attackers to bypass passkey entry in legacy pairing. Do you think this is a fundamental problem or flaw in the product itself? I speculate this is not…
-
If the vendor does not disclose details about Android kernel design weaknesses. What are the possible weaknesses? (18th Dec 2022)
Preface: Android 13, released on August 15, 2022, is the latest version, and the recently released Android 12.1/12L includes improvements specific to foldable phones, tablets, desktop-sized screens and Chromebooks. Background: In Android 11, the Android Common Kernel v5. Before kernel 4.12, opening /dev/ion allocated an Ion client. The IOC_ION_ALLOC ioctl allocated a new buffer and…
-
Details about my research on the Windows Kernel Elevation of Privilege Vulnerability CVE-2022-44683 (December 15, 2022)
Preface: Continuing yesterday’s discussion on CVE-2022-44683. Since cve doesn’t provide technical details. This point piqued my interest. Background: NTDEF(.)H is among the headers in the Software Development Kit (SDK). It is there in the “shared” subdirectory with many other headers that are intended for use in both kernel-mode and user-mode programming. Ref: NTDEF(.)H is also…
-
About Microsoft Patch Tuesday: For defense during corrective action. Virtual patching is a must for any company these days. (14th Dec 2022)
Preface: Cybersecurity is always critical. Business operations define cost efficiency. Simply put, reduce costs in cyber defense is not a good idea. Because it might lost your company reputation. Background: The details in today’s vulnerability bulletin are not detailed. Perhaps the reason for vendor not disclosed details is let their customer have schedule enough time…
-
Web server hosting on the cloud using elasticsearch, my brainstorming to cyber security (13th Dec 2022)
Preface: Most people will agree that the best eCommerce platforms are BigCommerce and Shopify.HCL Commerce (formerly known as WebSphere Commerce and WCS (WebSphere Commerce Suite)) is a software platform framework for e-commerce, including marketing, sales, customer and order processing functionality in a tailorable, integrated package. It was formerly product of IBM, the product was sold…
-
Alert awaken by CVE-2022-3259 – NVD Published Date:12/09/2022
Preface: Times have changed, and people’s concerns about data security are compared with the past three decades. it looks important. The basis of the design goals of the http protocol in the 90s was to focus on network connections. Because the computing technology at that time was very simple. It does not have the concepts…
-
CVE-2022-23471 containerd CRI stream server: Host memory exhaustion through Terminal resize goroutine leak (7th Dec 2022)
Preface: As of version 1.23, Kubernetes requires runtimes to be CRI compatible. It means that dockershim is now deprecated, and Docker Engine is no longer supported as a runtime. However, Kubernetes can still communicate with Docker via containerd, which can be CRI compliant with a plugin. History: “To not want a Buddhist monk after the…
-
Xen Security Advisory (XSA-424): CVE-2022-42328 and CVE-2022-42329 – Guests can trigger deadlock in Linux netback driver (7th Dec 2022)
Preface: A Xen guest typically has access to one or more paravirtualised (PV) network interfaces. These PV interfaces enable fast and efficient network communications for domains without the overhead of emulating a real network device. Background: XenServer can directly installs on bare-metal hardware without any restriction, overhead charge and performance obstacles of an Operating System.…