-
CVE-2023-38468 and CVE-2023-38467 related to urlid, whether the design limitation found by UNISOC chip is correlate to java matter? (4th Sep 2023)
Preface: The first-level (L1) cache is small enough to provide a one- or two-cycle access time. The second-level (L2) cache is also built from SRAM but is larger, and therefore slower, than the L1 cache. The processor first looks for the data in the L1 cache. If the L1 cache misses, the processor looks in…
-
CVE-2023-20851: Out-of-bounds read in stc (4th Sep 2023)
Preface: Xiaomi and Samsung are MediaTek’s biggest clients Background: MediaTek 8188 (MT8188) is a 64-bit ARM SoC introduced by MediaTek in 2022. The chip incorporates eight cores – six Cortex-A55 little cores and two Cortex-A78. Cortex-A78 can operate at up to 2.6 GHz. Cortex-A55 can operate at up to 2.0 GHz. STC(Store Coprocessor Registers) writes…
-
CVE‑2023‑25528 and CVE‑2023‑25533: A cough in Artificial Intelligence world!
(1st Sep 2023) Preface: AI (Artificial intelligence) moves from big data normalization to learning to understand data, so called trained. It require large amount of computer processing resources. The machine learning process requires CPUs and GPUs. GPUs are used to train large deep learning models, while CPUs are good for data preparation, feature extraction, and…
-
CVE-2023-20900 – Does SAML token signing bypass happen this way? (31-08-2023)
Preface: The easier way to get the SAML token is directly through the UserSession you can access in your Java plugin. UserSession has a samlTokenXml field. Then you can use the SSO API to convert that xml into the SAML token object. Background: VMware Tools is a set of services and modules that enable several…
-
Security Focus of CVE-2023-34039: About Aria Operations for Networks design weakness (Issue Date:2023-08-29)
Preface: VMware Aria Operations for Networks (Formerly vRealize Network Insight). Background: VMware Aria Operations for Networks (formerly vRealize Network Insight) delivers end-to-end network visibility converged across virtual and physical networks, planning and troubleshooting with assurance and verification that network and application connectivity performs towards business and security intents across Software Defined Data Center, VMware NSX,…
-
CVE-2023-41361: FRRouting 9.0 encountered buffer overflow (29th Aug 2023)
Preface: OSPF is used to determine the fastest route, while BGP focuses on determining the best path. Background: Network architects using FRR for ISPs, SaaS infrastructure, web 2.0 businesses, hyperscale services, and Fortune 500 private clouds. If you look around, the traditional networking equipment vendors also offer software appliances, because now it’s a tiny stackable…
-
CVE-2023-36481 – Buffer copy without checking input size during PPP communication in Shannon BaseBand (28th Aug 2023)
Preface: Samsung has also used a cheaper and less smart processor, Exynos 9610 with the unit cost of $14.90, for the affordable Galaxy A50 model. Background: Global edition devices instead use EXYNOS – Samsung LSI’s in-house SoC (System on a chip). Shannon co-exists in the SoC floorplan as an IP block. Every phone today that…
-
CVE-2023-40017 on GeoNodes (24th Aug 2023)
Preface: Server Side Request forgery (SSRF) in few years ago not bring IT admin attention. But when ransomware was born, SSRF vulnerability make worries because it can exploit by cyber criminals. So we should be careful when we know our web server apps contains SSRF vulnerability. Background: GeoNode is a geospatial content management system, a…
-
CVE-2023-40178: Node-SAML Improper Verification of Cryptographic Signature(23rd Aug 2023)
Preface: Now that said, SSO reduces the number of attack surfaces because users only log in once each day and only use one set of credentials. Reducing login to one set of credentials improves enterprise security. Or are there other concerns? Background: Node-SAML has built in support for SLO including. Signature validation. IdP initiated and…
-
CVE-2023-41105: Python 3.11 through 3.11.4.(os[.]path[.]normpath) truncates input on null bytes (23th Aug 2023)
Preface: It is popular like Java, Python applications can run on all operating systems (Windows, Unix, Linux, Mac). Background: What’s New in Python 3.11. One of the new module is tomllib – For parsing TOML.I. TOML makes writing configuration files simple, straightforward, and more human-readable than many other formats, including JSON.The TOML file used to…