-
CVE-2023-49100: TF-A before 2.10 has a potential read out-of-bounds in the SDEI service (21-02-2024)
Preface: Trusted Firmware-A (TF-A) provides a reference implementation of secure world software for Armv7-A, Armv8-A and Armv9-A, including a Secure Monitor executing at Exception Level 3 (EL3) and a Secure Partition Manager running at Secure EL2 (S-EL2) of the Arm architecture. Background: Software Delegated Exception Interface (SDEI) provides a mechanism for registering and servicing system…
-
CVE-2023-52439 Fix use-after-free in uio_open (20th Feb 2024)
Preface: Do you think this design flaw is risky? Yes, I think so. Background: The UIO is a general purpose kernel driver that can be accessed from user space. The purpose of the driver is to act as a thin layer between user space programs and the hardware. Since Linux uses a virtual address system,…
-
CVE-2024-1633: Do not contempt! (19th Feb 2024)
Preface: A two-stage bootloader actually consists of two bootloaders after each other. The first being small with the sole purpose of loading the second one. The second one can then contain all the code needed for loading the kernel. Background: Secure boot is a security standard developed to help make sure that a device boots…
-
CVE-2024-20953: Since Oracle did not reveal the details. But we can dig out details for existing design to see does it related to this vulnerability? (18th Feb 2024)
Preface: At the most fundamental level, product lifecycle management (PLM) is the strategic process of managing the complete journey of a product from initial ideation, development, service, and disposal. Background: Agile product lifecycle management (PLM) applies agile principles and methodologies to product management. It is often utilized in software development and its ongoing refinements, improvements,…
-
CVE-2024-0646: About KTLS (15th Feb 2024)
Preface: Because when using TLS to transmit static content, the data needs to be read into user space and encrypted before the encrypted data can be transmitted. Facebook found that in the process of using TLS, it will spend 2% of the CPU processing copy from/to user space, and 10% of the CPU will be…
-
Incorrect authorization vulnerability was identified in GitHub Enterprise Server (14 Feb-2024)
Preface: The main difference between the products is that GitHub Enterprise Cloud is hosted by GitHub, while GitHub Enterprise Server is self-hosted. GitHub Enterprise Cloud includes an enterprise account that lets you manage multiple organizations. Sign in to the AWS Management Console and open the Developer Tools Console: https://console[.]aws[.]amazon[.]com/codesuite/settings/connections. Select Settings > Connections, then select…
-
Regarding CVE-2024-22237, VMware did not provide details. But do you think this design weakness is the similar as what you’ve seen before? (13th Feb 2023)
Preface: CWE-269: Improper Privilege Management vulnerability exists that could cause a remote code execution when the transfer command is used over the network. Background: VMware Aria Operations for Networks is a pre-hardened and secured appliance. VMware Aria Operations for Networks is hardened against well-established and industry-accepted security benchmarks, for example: CIS. VMware Aria Operations for…
-
About NVIDIA Security Bulletin – CVE-2023-31031 (12th Feb 2024)
This NIVIDIA security bulletin was originally published on 8th Feb 2024. CVE-2023-31031 was released by NIST on January 12, 2024. But what were the design flaws found in SBIOS? Officials stated that the flaw will lead to a stack-based buffer overflow in local access. Preface: NVIDIA did not describe the details of this vulnerability. Do…
-
CVE-2023-33072: Buffer copy without checking size of Input in Core (6th Feb 2024)
-
CVE-2023-5643: Mali GPU Kernel Driver allows improper GPU memory processing operations (5th Feb 2024)
Preface: Out-of-bounds writes, a common explanation, are the consequences of writing to memory outside the boundaries of the buffer or to invalid memory when the root cause is not sequential copying of too much data from a fixed starting position. This may include issues such as incorrect pointer arithmetic, access to invalid pointers due to…