-
The design weakness was beyond vendor control. VMware Vulnerabilities (CVE-2021-21976) – 12th Feb 2021
Preface: With vSphere Replication, you can set up replication of VM from the source site to the target site, monitor and manage the replication status, and restore VM on the target site. Background: vSphere Replication is an alternative to storage-based replication. It protects virtual machines from partial or complete site failures by replicating the virtual…
-
CVE-2021-1732 Win32k Elevation of Privilege Vulnerability (11th Feb 2021)
Preface: There are many reasons to encounter win32k.sys problems. Most issues related to SYS files involve blue crashes in past. Background: win32k.sys is a valid program that is required to run at startup.The Graphics Device Interface Provides functionality for outputting graphical content to monitors, printers and other output devices. It resides in gdi.exe on 16-bit…
-
CVE-2021-3347 – An issue was discovered in the Linux kernel through 5.10.11 (use-after-free) – 8th Feb 2021
Preface: Unlike Windows or MacOS which push out software updates to users automatically, it is up to developers to look for Linux kernel updates on their own. Background: The futex() system call provides a method for waiting until a certain condition becomes true. It is typically used as a blocking construct in the context of…
-
Design weakness of Root File System mechanism – Nvidia multiple products (4th Feb, 2021)
Preface: In 2020, the global AI software market is expected to grow approximately 54 percent year-on-year, reaching a forecast size of 22.6 billion U.S. dollars. Background: NVIDIA® Jetson™ Linux requires a root file system. You must create a Linux host system and copy it to your reference board. NVIDIA provides a tool to generate a…
-
cve-2021-22159 – local privilege escalation vulnerability in observeIT windows agent (3rd Feb 2021)
Preface: About decades ago, video recording was used to perform IT system monitoring and governance. The most famous brands are RSA NetWitness and CyberArk. However, products made in Israel provide a cost-effective solution. The software product named “ObserveIT”. The “ObserveIT” software product is now under the umbrella of Proofpoint, Inc.. Vulnerability details: The Proofpoint Insider…
-
No workaround: You should patch immediately – Linux sudo flaw (2nd Feb 2021)
Background: sudo command allows you to run programs with the security privileges of another user. All auditors and security expert highly recommend to use. We can say it is a best practices. Vulnerability details: Sudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via “sudoedit -s”and a command-line argument that ends…
-
Adobe ColdFusion Design weakness (Vulnerability Note VU#125331) 1st Feb 2021
Background: Adobe ColdFusion is a development platform that uses CFML to quickly build modern web apps. Unlike other programming languages, ColdFusion is tag-based. It’s easy to use and can be the backbone of numerous development modules and functionalities. Dynamic-link library loading mechanism: The DLL loaded once and all programs share the same in-memory copy of…
-
You should be vigilant! (CVE-2020-17380) – 1st Feb 2021
Preface: Mount a drive image emulated as an SD card with qemu-system-x86_64. qemu-system-x86_64 -smp cores=4 -m 1024 -device sdhci-pci -device sd-card,drive=mydrive -drive id=mydrive,if=none,format=raw,file=image.bin Background: QEMU Integration with other virtual machines VirtualBox uses some QEMU virtual hardware devices and has a built-in qemudede-based Dynamic re-compiler.Same as KQEMU. Xen HVM has device emulation based on the QEMU…
-
Virtual Journey – Journey to the Center of the Earth (2021)
Preface: The period from January 1, 2001 to December 31, 2100 is called the 21st century. Furthermore, our technologies world has demand for virtual technology concept. For example, virtual machine, virtual reality,..etc. Have you been think that you can do a virtual journey. See whether what is the gap in between reality and imagination? Background:…
-
Perhaps the IoT world should be vigilant – CVE-2021-3177 (26th Jan 2021)
Preface: On macOS, dynamic-link libraries are known as dylib files. This is the equivalent to a DLL on Windows anda shared library (or .so library) on Linux. Background: ctypes is a foreign function library for Python. It provides C compatible data types, and allows calling functions in DLLs or shared libraries. It can be used…