-
About CVE-2023-22881 and CVE-2023-22882 : malicious UDP receive by client cause a denial of service (16th Mar 2023).
Preface: Make sure to use the STUN message format specified in standard, to perform the MESSAGE-INTEGRITY computation. This protocol uses Simple Traversal of UDP through NAT (STUN) binding request and response messages for connectivity checks between the two endpoints. Background: Most attackers utilize UDP to launch amplification attacks since reflection of traffic with spoofed IP…
-
Staying alert of opensips vulnerabilities (16th Mar 2023)
Preface: SIP protocol take the stage of traditional telephony system. We cannot lack of this protocol today. Background: The Session Initiation Protocol is a signaling protocol that enables the Voice Over Internet Protocol (VoIP) by defining the messages sent between endpoints and managing the actual elements of a call. SIP supports voice calls, video conferencing,…
-
Have you upgraded your Linux kernel? (15th Mar 2023)
Preface: Blue screen of death (BSOD) is error display on Windows commonly. In Linux, it is unlikely and uncommon, but is it possible? Background: As the only copyright holder to the GPL-covered components of the software, you are free to add exceptions and additional terms to the GPLv3, as described in section 7 of that…
-
ndctl: release v76.1, have you update yet? (14th Mar 2023)
Preface: Preface: Advantages of NVDIMMs in servers. NVDIMMs provide high-speed DRAM performance coupled with flash-backed persistent storage. Aside from providing an additional memory tier in servers, NVDIMM persistence allows applications to continue processing I/O traffic during planned or unexpected system failures. Background: Persistent Memory (PM) is a type of Non-Volatile Memory (NVM). The ndctl utility…
-
Ccache technical matter , whether it will bring your attention? (13th Mar 2023)
Preface: Multiphysics Object-Oriented Simulation Environment (MOOSE) – An open-source, parallel finite element framework. Background: ccache is a compiler cache that speeds up recompilation by caching previous compilations and detecting when the same compilation is being done again. ccache can deliver significant speedups when developing MOOSE-based applications, or working on the framework itself.Multiphysics Object Oriented Simulation…
-
About CVE-2022-46394 – know a little bit about it (9th Mar 2023)
Preface: The Android Neural Networks API (NNAPI) is an Android C API designed for running computationally intensive operations for machine learning on Android devices. NNAPI is designed to provide a base layer of functionality for higher-level machine learning frameworks, such as TensorFlow Lite and Caffe2, that build and train neural networks. The API is available…
-
CVE-2022-4904 : Does C-ares weakness impact chrome. Perhaps it has fixed. (8th Mar 2023)
Preface: Google Chrome employ a feature, Async DNS. The objective is avoid traditional way using public DNS function. When google (Chrome) running, all the resolving domain name activities will be point to google DNS server.In Security point of view, it is good. At least it reduced unknown trap intend to hunting victim. It benefits to…
-
About CVE-2023-23916 – Don’t take vulnerabilities lightly (8th Mar 2023)
Preface:HTTP/1.1 – The current resource must finish downloading before making another request; each has a delay of one round-trip-time (RTT).HTTP/2 solves the HOL Blocking problem with multiplexing that uses streams which can be prioritized. Background: Curl attempts to provide a unified model through which applications belonging to different platforms and languages can communicate. The simple…
-
Whatever it was, no details were officially provided. Are you talking about this feature? (7th Mar 2023 GMT+9)
Preface: In Android 11, its automatically resetting permissions for apps you haven’t used for an extended period of time.In Android 13, app makers can go above and beyond in removing permissions even more proactively on behalf of their users.How do I stop Android from removing app permissions? Go into your system settings, go to app…
-
KB5019180: Urged by Microsoft on Intel former CPU vulnerability this month (2nd Mar 2023), we should staying alert. (6th Mar 2023 GMT+9)
Preface: Windows 10’s market share jumped from 68.86% in January 2023 to 73.31% in February 2023. Windows 11’s market share increased as well, but only by 1.01% to 19.13% in February 2023, said ghacks[.]net.Remark: Windows 10 continues to be supported by Microsoft until October 2025. Background: Some said, Intel microprocessors use direct I/O. Yes, Direct…