-
CVE-2022-33936 Cloud Mobility for Dell EMC Storage Security Update for a Path Traversal/RCE Vulnerability (7th July 2022)
Preface: NVM Express is highly optimized for memory-based storage. There are many distinct benefits associated with NVM Express. It significantly improves sequential and random performance thanks to reduction in latency. It is capable of accessing more data per CPU cycle. Background: The Dell EMC PowerMax family is the first Dell EMC hardware platform that uses…
-
Apple’s new lock mode. Do you think it is for protection against spyware or to prepare for new EU regulations (WhatsApp, iMessage and other apps for communication)? 7-7-2022
Preface: The UK GDPR is the UK General Data Protection Regulation. It is a UK law which came into effect on 01 January 2021. It sets out the key principles, rights and obligations for most processing of personal data in the UK, except for law enforcement and intelligence agencies.On 28 June 2021, the EU approved…
-
When you do the fix for CVE-2022-26365, CVE-2022-33740, CVE-2022-33741& CVE-2022-33742. You should consider this matter (6th July 2022)
Preface: When you do the fix for CVE-2022-26365, CVE-2022-33740, CVE-2022-33741& CVE-2022-33742. You should consider this matter. Patch 1 introduces a new field to the disk and nic configurations that allow signaling on a per-device basis whether the backend should be trusted. This is an ABI incompatible change, and cannot be applied to stable branches.Patch 2…
-
CVE-2022-34918 – Linux kernel: Netfilter heap buffer overflow in nft_set_elem_init (4th July 2022)
Preface: Registering callback in C means you are providing function pointer to any module. When any event arises, registered function will be called to serve this event. Background: The netfilter hooks are a framework inside the Linux kernel that allows kernel modules to register callback functions at different locations of the Linux network stack. The…
-
CVE-2022-28200 NVIDIA DGX A100 contains a vulnerability in SBIOS in the BiosCfgTool (3rd July 2022)
Preface: Collecting and storing data is one of the most important steps of the AI workflow. AI analytics refers to a subset of business intelligence that uses machine learning techniques to discover insights, find new patterns and discover relationships in the data. In practice, AI analytics is the process of automating much of the work…
-
About Das U-Boot (CVE-2022-34835) – 30th June 2022
Preface: Who use the Das u-boot? SpaceX’s Falcon and Dragon both use U-Boot. Asahi Linux uses it as payload for m1n1 in order to boot Linux on Apple Silicon Mac. Background: U-Boot is an open-source, cross-platform boot loader that provides out-of-box support for hundreds of embedded boards and many CPUs, including PowerPC, ARM, XScale, MIPS,…
-
CVE-2022-31106 – The function deepFromFlat of underscore[.]deep is vulnerable to prototype pollution (28th June 2022)
Preface: When defining mappings, it will configure the fields that contain an array of objects within them as “object” type. This is fine in many cases, but sometimes the mappings will need to be adjusted.Nested is a special type of object that is indexed as a separate document, and a reference to each of these…
-
About Apache Tika (CVE-2022-33879): Second round of fixes for CVE-2022-30126 and CVE-2022-30973 (27th June 2022)
Preface: Backtracking is a technique based on algorithm to solve problem. It uses recursive calling to find the solution by building a solution step by step increasing values with time. Background: Apache Tika is a content type detection and content extraction framework. The Apache Tika™ toolkit detects and extracts metadata and text from over a…
-
Dramatic remedy (CVE-2022-34494 & CVE-2022-34495), another new finding occured on 24th June 2022
Preface: Modern SoCs typically employ heterogeneous remote processor devices in asymmetric multiprocessing (AMP) configurations, which may be running different instances of operating system, whether it’s Linux or any other flavor of real-time OS. The Linux* Kernel vhost-net module was developed as an offload mechanism for virtio-net. The vhost-net module enables KVM (QEMU) to offload the…
-
June 25th 2022 (APAC time zone), an extremely rare astronomical phenomenon
In the early morning of June 25th 2022 (APAC time zone), an extremely rare astronomical phenomenon “Eight Starts Converging” will be staged. During this period, Jupiter,Mars,Venus and Mercury, a total of five stars will appear in the night sky at the same time, and will be connected in a line to form the “Five Stars…