-
CVE-2024-3056 – About Podman (5th-Aug-2024)
-
RHSA-2024-4982 -Security Advisory- OpenShift API for Data Protection (OADP) – Security Fix – golang: net/netip – CVE-2024-24790 (2nd Aug 2024)
Preface: The IPv4-mapped IPv6 address format allows the IPv4 address of an IPv4 node to be represented as an IPv6 address. The IPv4 address is encoded into the low-order 32 bits of the IPv6 address, and the high-order 96 bits hold the fixed prefix 0:0:0:0:0:FFFF. Background: OpenShift API for Data Protection (OADP) enables you to…
-
CVE-2024-40782 – Nullptr crash due to `display:ruby block` and continuations. (1st Aug 2024)
Preface: Apple doesn’t allow third party developers to use any other browser engine other than the WebKit which is the engine developed by Apple. Background: The browser parses HTML into DOM and css into CSSOM and combines them to create a render tree. Once each node from the DOM has its style assigned, the rendering…
-
CVE-2024-33976: Check for correct values rank in UpperBound and LowerBound. (30th Jul 2024)
Preface: Segmentation faults (segfaults) are a common error that occurs when a program tries to access a restricted area of memory. Segfaults can occur for a wide variety of reasons: usage of uninitialized pointers, out-of-bounds memory accesses, memory leaks, buffer overflows, etc. Background: TensorFlow can be used to develop models for various tasks, including natural…
-
CVE-2024-40836: iOS allows running scripts from shortcuts but making protecting your data difficult! (July 29, 2024)
CVE-2024-40836: iOS allows running scripts from shortcuts but making protecting your data difficult! (July 29, 2024) Preface: A shortcut is usually implemented as a small file that contains the target URI or GUID of the object, or the name of the target program file that the shortcut represents. Shortcuts can also specify parameters to be…
-
NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in ipfilter (Updated 07/24/2024)
Preface: NVIDIA® offers a wide range of Network Operating Systems (NOS), from the homegrown Ethernet Operating System, NVIDIA Mellanox Onyx™, to native Linux operating systems, NVIDIA Cumulus Linux, and a variety of vendor specific options. Background: NVIDIA® MLNX-OS® operating system, enables the management and configuration of NVIDIA’s InfiniBand switch system platforms. NVIDIA MLNX-OS®, an InfiniBand…
-
Regarding CVE-2024-0108: The manufacturer did not describe much. Is the situation below exactly what CVE mentioned? (25/07/2024)
Preface: What is an example of autonomous AI? Autonomous intelligence is artificial intelligence (AI) that can act without human intervention, input, or direct supervision. It’s considered the most advanced type of artificial intelligence. Examples may include smart manufacturing robots, self-driving cars, or care robots for the elderly. Background: What is Jetson AGX Xavier used for? As…
-
CVE-2024-41012: filelock- Remove locks reliably when fcntl/close race is detected (24/07/2024)
In the Linux kernel, design weakness (CVE-2024-41012) has been resolved. Preface: The GFP acronym stands for “get free pages”, the underlying memory allocation function. Diversity of the allocation APIs combined with the numerous GFP flags makes the question “How should I allocate memory?” not that easy to answer, although very likely you should use. kzalloc(<size>,…
-
CVE-2024-6960: H2O Model Deserialization RCE (21st July 2024)
Preface: TensorFlow provides a flexible framework for deep learning tasks, but may not be as optimized as H2O for handling large datasets. Background: H2O uses Iced classes as the primary means of moving Java Objects around the cluster. Auto-serializer base-class using a delegator pattern (the faster option is to byte-code gen directly in all Iced…
-
A critical step in exploiting a buffer overflow is determining the offset where important program control information is overwritten. In the Linux kernel, the (CVE-2024-41011) vulnerability has been resolved. (18-07-2024)
Preface: The PAGE_SIZE macro defined in the Linux kernel source determines the page size. Its definition is in the kernel header file /usr/src/kernels/5.14[.] 0-22. el9[.] x86_64/include/asm-generic/page. Background: MMIO stands for Memory-Mapped Input/Output. In Linux, MMIO is a mechanism used by devices to interface with the CPU that involves mapping their control registers and buffers directly…