-
CVE-2022-36124 – Linux kernel design flaws prior to 5.18.13 put Xen PV guest OS at risk (29-07-2022)
Preface: Uninitialized data segment, often called the “bss” segment, named after an ancient assembler operator that stood for “block started by symbol.” Data in this segment is initialized by the kernel to arithmetic 0 before the program starts executing. Background: Xen is an open-source baremetal hypervisor that is widely used by commercial and non-commercial platforms…
-
CVE-2021-22641 – Cyber attack on TCPmodbus protocol products (28th July 2022)
Preface: Last September (2021) ICS adviced that the public should be concerned about the multiple vulnerabilities encountered by Modbus products. This product model is (TBox) from the supplier Ovarro.Such vulnerabilities were documented in a CVE article published until this week (July 28, 2022). The record number is CVE-2021-22642.Perhaps reader has confuse about this CVE record…
-
CVE-2022-36946 – About Android and Linux (Torvalds) netfilter design weakness (27th July 2022)
Preface: What is SKB in Linux kernel? SKBs are composed of a linear data buffer, and optionally a set of 1 or more page buffers. If there are page buffers, the total number of bytes in the page buffer area is ‘data_len’. Therefore the number of bytes in the linear buffer is ‘skb->len – skb->data_len’.…
-
Even though it is protected in the software driver to avoid buffer overflows in the driver. But still let the cyber security provider draw out the shortcomings! (26th July 2022)
Preface: According to technical report (OT:ICEFALL) by cyber security service provider (Forescout). They observe that an APT toolkit targeting several OT devices, such as OPC UA servers and PLCs from Omron and Schneider Electric. According to ICS-CERT advisories on 28th June, 2022. The article had written down the RISK EVALUATION. Successful exploitation of these vulnerabilities…
-
CVE-2022-35651 – A stored XSS and blind SSRF vulnerability was found in Moodle (25th July 2022)
Preface: As time goes by, online training course is the mainstream to offload traditional onsite training course. The Learning Management System (LMS) is a software application designed to deliver, track, report on and manage trainings and learner activity. Some popular LMS used by educational institutions include Moodle, Blackboard Learn and Schoology.Accroding to security reason, LMS…
-
About CVE-2021-46829 – Sometimes old things are easy to forget. A flaw found last year; it was awakened now (24th July 2022).
Preface: GdkPixbuf is a library with a long history, and it has been incrementally modified over years, so it may retain some older coding practices alongside newer ones. Background: GdkPixbuf is a library that loads image data in various formats and stores it as linear buffers in memory. The buffers can then be scaled, composited,modified,…
-
CVE-2022-31160 : jQuery UI checkboxradio cross site scripting (21st July 2022)
Preface: jQuery is an independent JavaScript library which brings along added functions and additional functionality to the standard built-in objects to what JavaScript natively provides. The programming crowd with jQuery still looks strong. According to w3techs stats. Popular sites are still using jQuery. Background: jQuery is the core library. jQueryUI is built on top of…
-
Vulnerability for Improper Handling of Exception Conditions on specifics Juniper Networks Products (20th July 2022)
Preface: Common JUNOS daemons include: The routing protocol daemon (rpd) handles all routing protocol messages and routing table updates and implements routing policies. rpd contains modules that each function independently while sharing information with the others. The device control daemon (dcd) manages all interface devices and configurations. This daemon sends configurations to the kernel to…
-
Oracle Critical Patch Update Advisory – July 2022 Close-up of CVE-2022-21565 (19th July 2022)
Preface: Oracle Database 19c is the current long term release, and it provides the highest level of release stability and longest time-frame for support and bug fixes. Oracle Database 21c, also available for production use today as an innovation release, provides an early insight into the many enhancements and new capabilities. Background: Use the CREATE…
-
About RISC-V and RISC-V ISA Simulator design weakness (18-07-2022)
Preface: A growing number of Chinese chip design firms have adopted open-source RISC-V in their chip designs as an alternative to Intel’s proprietary X86 and Arm’s architecture, in a bid to minimise potential damage from US sanctions and to save on licensing fees. Background: If you still remember? The RISC System/6000 (RS/6000) is a family…