-
CVE-2024-5914 Cortex XSOAR: Improper Neutralization of Special Elements used in a Command (16th Aug 2024)
Preface: You can hold YAML content in files with any extension: .yml, .yaml or indeed anything else. Background: Cortex XSOAR combines security orchestration, incident management, and interactive investigation into a seamless experience. The orchestration engine is designed to automate security product tasks and weave in human analyst tasks and workflows. Cortex XSOAR is powered by…
-
CVE-2024-21969: (AMD security focus) Whispering Pixels – Exploiting Uninitialized Register Accesses in Modern GPUs (14th Aug 2024)
Preface: The new AMD Radeon Instinct MI50 hints at the capabilities of AMD’s future GPUs. A study proof MI50 is capable scientific and ML applications. Background: The proliferation of graphics processing units (GPUs) has brought unprecedented computing power. Multiple register-based vulnerabilities found across different GPU implementations. So-called whisper pixels. The vulnerability poses unique challenges to…
-
NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in web support (07 Aug 2024)
Preface: CGI is a standard protocol that allows web servers to execute external programs or scripts, typically written in languages like Perl or Python, in response to client requests. Path Traversal: Exploiting lax file path validation, attackers navigate outside the intended directory, accessing restricted files or directories. Background: MLNX-OSis a next-generation switch operating system for…
-
About CVE-2024-7553: Improper Access Control in MongoDB (8th Aug 2024)
Preface: What Is a Document Database? A document-oriented database is a special type of key-value store where keys can only be strings. Moreover, the document is encoded using standards like JSON or related languages like XML. You can also store PDFs, image files, or text documents directly as values. Background: As a document database, MongoDB…
-
CVE-2024-3056 – About Podman (5th-Aug-2024)
-
CVE-2024-33976: Check for correct values rank in UpperBound and LowerBound. (30th Jul 2024)
Preface: Segmentation faults (segfaults) are a common error that occurs when a program tries to access a restricted area of memory. Segfaults can occur for a wide variety of reasons: usage of uninitialized pointers, out-of-bounds memory accesses, memory leaks, buffer overflows, etc. Background: TensorFlow can be used to develop models for various tasks, including natural…
-
Regarding CVE-2024-0108: The manufacturer did not describe much. Is the situation below exactly what CVE mentioned? (25/07/2024)
Preface: What is an example of autonomous AI? Autonomous intelligence is artificial intelligence (AI) that can act without human intervention, input, or direct supervision. It’s considered the most advanced type of artificial intelligence. Examples may include smart manufacturing robots, self-driving cars, or care robots for the elderly. Background: What is Jetson AGX Xavier used for? As…
-
CVE-2024-6960: H2O Model Deserialization RCE (21st July 2024)
Preface: TensorFlow provides a flexible framework for deep learning tasks, but may not be as optimized as H2O for handling large datasets. Background: H2O uses Iced classes as the primary means of moving Java Objects around the cluster. Auto-serializer base-class using a delegator pattern (the faster option is to byte-code gen directly in all Iced…
-
A critical step in exploiting a buffer overflow is determining the offset where important program control information is overwritten. In the Linux kernel, the (CVE-2024-41011) vulnerability has been resolved. (18-07-2024)
Preface: The PAGE_SIZE macro defined in the Linux kernel source determines the page size. Its definition is in the kernel header file /usr/src/kernels/5.14[.] 0-22. el9[.] x86_64/include/asm-generic/page. Background: MMIO stands for Memory-Mapped Input/Output. In Linux, MMIO is a mechanism used by devices to interface with the CPU that involves mapping their control registers and buffers directly…
-
CVE-2024-41009: bpf – Fix overrunning reservations in ringbuf (17th July 2024)
Preface: Consumer and producer counters are put into separate pages to allow each position to be mapped with different permissions. This prevents a user-space application from modifying the position and ruining in-kernel tracking. The permissions of the pages depend on who is producing samples: user-space or the kernel. Starting from Linux 5.8, BPF provides a…