-
About CVE-2023-21930: JSSE design weakness (24th Apr 2023)
Preface: The goal is to make internal adjustment to the design of security classes (including the SecurityManager and ClassLoader classes) to reduce the risks of creating subtle security holes in future programming. Background: The Java Secure Socket Extension (JSSE) enables secure Internet communications. It provides a framework and an implementation for a Java version of…
-
About CVE-2023-27536 – Amazon provides alert on “libcurl” design weakness (23rd Apr 2023)
Preface: cURL command is an important Linux tool, commonly used for data transfer and connection troubleshooting. Background: EC2 Instance – Amazon Elastic Compute Cloud (Amazon EC2) provides scalable computing capacity in the Amazon Web Services (AWS) Cloud. Using Amazon EC2 eliminates your need to invest in hardware up-front so that you can develop and deploy…
-
About CVE-2023-2194: Design weakness found in the Linux kernel’s SLIMpro I2C device driver (21st Apr 2023)
Preface: Every day on earth, there is a vulnerable presence in the digital world. This penguin make your life easily, sometimes it was not good. But this is the life cycle of our digital world. Background: This driver (X-Gene SLIMpro I2C Driver) provides support for X-Gene SLIMpro I2C device access using the APM X-Gene SLIMpro…
-
Oracle April 2023 Critical Patch Update Addresses 231 CVEs (19th Apr 2023)
Preface: WebLogic was a company (from 1995 to 1998) credited with creating the first J2EE application server, the WebLogic Application Server. Background: Oracle Fusion Middleware provides the WebLogic Management Framework, which provides heterogeneous management capabilities for Oracle Fusion Middleware products that require basic administrative capabilities.Fusion Middleware Control is a Web-based administration console used to manage…
-
Maybe you need to know – Amazon Linux 2 Security Advisory (19th Apr 2023)
Preface: Is it legal to modify Linux kernel? Yes, it is completely legal to edit the Linux kernel since it is under General Public License – GNU. Background: With Amazon Linux 2, you get an application environment that offers long term support with access to the latest innovations in the Linux ecosystem. Amazon Linux 2…
-
On Tuesday April 18, 2023, Oracle Pre-Release April Critical Patch Update.
Preface: The blockchain technology can ensure the security and integrity of data. By combining AI and blockchain, it is possible to create more powerful systems. Background: When taking about Blockchain, we simply will think about ctyptocurrecy. As a matter of fact, Blockchain technology influenced far-reaching in the world of science and technology.Oracles provide a way…
-
CVE-2023-26083 – expose sensitive kernel metadata (16-04-2023)
Preface: The kernel doesn’t have libc or system calls if you’re not running in user mode. Background: Open Source Mali Midgard GPU Kernel Drivers – The Android and Linux version of the Mali GPUs Device Driver provide low-level access to the Mali-T6xx, Mali-T7xx and Mali-T8xx series GPUs.Under normal circumstances once kernel driver and user-space libraries…
-
CVE-2023-27267 : Issue of concern – April 11, 2023 SAP released the latest security patch date (14th Apr 2023)
Preface: According to the CVSS 3.1 standard, if the score reaches 9.0, it is considered high risk. I beleived that the design limitation of CVE-2023-27267 also concern by vendor. From a security point of view, how does an attacker trigger this design weakness? Let’s start a short journey based on speculation. See whether it give…
-
CVE-2023-0208 – update for NVIDIA® Data Center GPU Manager (DCGM) (13th Apr 2023)
Preface: The easter hoilday in 2nd week of April. So this news may have late. On 03/31/2023 03:00 PM, NVIDIA has released a software update for NVIDIA® Data Center GPU Manager (DCGM). The update addresses security issues that may lead to denial of service and data tampering.Be my guest, see wether you will be interested?…
-
About CVE-2023-28205 and CVE-2023-28206: Hunter, hunting apple design weakness (12th Apr 2023)
Preface: memcpy() function is is used to copy a specified number of bytes from one memory to another. memmove() function is used to copy a specified number of bytes from one memory to another or to overlap on same memory. Background: WebKit is the part of Apple’s browser engine that sits underneath absolutely all web…