-
CVE-2024-21661: Argo CD suffers denial of service (DoS) vulnerability (18-03-2024)
Preface: What does multi threaded environment mean? Multithreading is the ability of a program or an operating system to enable more than one user at a time without requiring multiple copies of the program running on the computer. Background: Argo CD is implemented as a Kubernetes controller which continuously monitors running applications and compares the…
-
CVE-2024-2193: Specter v1 variant inheriting the Specter v1 vulnerability. So called GhostRace. AMD believes the previous guidance remains applicable to mitigate this vulnerability (15-03-2024)
AMD made this announcement on March 12, 2024. Preface: Spectre variant 1 attacks take advantage of speculative execution of conditional branches, while Spectre variant 2 attacks use speculative execution of indirect branches to leak privileged memory. Background: Speculative execution improves speed by operating on multiple instructions at once—possibly in a different order than when they…
-
About CVE-2023-39368: The machine learning process requires CPUs and GPUs. Does bus lock regulator mechanism impact this area? Glad to tell, the problem fixed. (14-03-2024)
CVE-2023-39368 was published on 13th March 2024. In fact, Intel solve this problem since the end of 2020. Maybe hesitant about this design weakness. So it wasn’t announced until this month. Preface: What is Intel E core? While P cores are focused on delivering peak performance for intensive workloads, E cores ensure that the system…
-
CVE-2024-27307: Not only machine learning, other system should staying alert because zOS Connect Designer uses JSONata, an open source expression language that is used for querying and transforming JSON data. (7thMar 2024)
Preface: What is declarative machine learning? Declarative machine learning enables users to specify what they want, and let the software figure out how to do it. Declarative ML is similar to AutoML tools that also make default selections and automate part or all of the ML lifecycle. Background: JSONata is a JSON query and transformation…
-
About NVIDIA Security Bulletin – CVE-2023-31031 (12th Feb 2024)
This NIVIDIA security bulletin was originally published on 8th Feb 2024. CVE-2023-31031 was released by NIST on January 12, 2024. But what were the design flaws found in SBIOS? Officials stated that the flaw will lead to a stack-based buffer overflow in local access. Preface: NVIDIA did not describe the details of this vulnerability. Do…
-
CVE-2023-33072: Buffer copy without checking size of Input in Core (6th Feb 2024)
-
About CVE-2018-1311: Security update for xerces-c provided by SUSE on Feb 2024. Why do design weakness can tolerance by HPC Operating system for long year? (02-02-2024)
Preface: Different HPC compilers allow the coder to make use of these tools for better performance and capability. For example, using HPC compilers allow for easier coding to run a parallel job. Compilation is the process of converting C language source code into executable program code. Running is the process of executing executable code. Compilation…
-
VE-2023-6780: Do not contempt his power! (1st Feb 2024)
Preface: The GNU C Library – The project provides the core libraries for the GNU system and GNU/Linux systems. GLib is a platform library which is used by many hundreds of projects outside of GNOME. Background: R is a language and environment for statistical programming which includes statistical computing and graphics. Python is a general-purpose…
-
CVE-2024-23212: Apple Neural Engine design has weakness in memory handling. (25th January 2024)
This announcement was originally published on January 22nd 2024 Preface: Neural networks, also known as artificial neural networks (ANNs) or simulated neural networks (SNNs), are a subset of machine learning and are at the heart of deep learning algorithms. Recent advances in artificial intelligence systems, such as voice or facial recognition programs, have benefited from neural networks, densely interconnected…
-
LiDAR assists archaeologist discovered ruins found in upper Amazon rainforest (15th Jan 2024)
Preface: In ancient time of South America Tribal leaders would cover their bodies with gold powder and wash themselves in a holy lake in the mountains. For example, the famous place for ancient civilization execute this ceremony is Lake Titicaca. Priests and nobles would throw precious gold and emeralds into the lake dedicated to God.…