-
CVE-2022-20120: A remote code execution (RCE) vulnerability in the bootloader on Pixel devices (10th May 2022)
Preface: Google Pixel is a brand of consumer electronic devices developed by Google that run either Chrome OS or the Android operating system. The Pixel brand was introduced in February 2013 with the first-generation Chromebook Pixel. The Pixel line includes laptops, tablets, and smartphones, as well as several accessories. Background: The Google Pixel is one…
-
CVE-2022-28165 for Brocade SANnav (6th May, 2022)
Preface: If you look into a Mainframe computer system, you will find Brocade SANS storage made use of Ficon connection. As times goes by, Hi-end supercomputer system still using this solution.Furthermore, Brocade products not limit the usage in supercomputer. The Fibre Channel storage networking and management solution are expanded to cloud computing. Becuase the Fibre…
-
About F5 network advisory – CVE-2022-1388 (5th May 2022)
Preface: A distributed hypermedia architect has only three fundamental options: 1) render the data where it is located and send a fixed-format image to the recipient; 2) encapsulate the data with a rendering engine and send both to the recipient; or, 3) send the raw data to the recipient along with metadata that describes the…
-
CVE-2022-30284 – Design weakness in the python-libnmap package (4th May 2022)
Preface: If you do a resources plan in large data center. Maybe you use nmap. E.g: Performs a list scan on the provided ranges and returns an NmapReport object including in your MIS report. Background: libnmap is a python library to parse nmap xml data. It supports python 3.6+. libnmap is a python library enabling…
-
About CVE-2022-0882 – Fuchsia allows illegal access to the kernel log (3rd May 2022)
Preface: Fuchsia is an IoT; first OS means OS for your fridge, RaspberryPi, car, TV, etc. Background: Zircon is the core platform that powers the Fuchsia OS. Zircon is composed of a microkernel (source in kernel/…) as well as a small set of userspace services, drivers, and libraries (source in system/…) necessary for the system…
-
About CVE-2022-28197: NVIDIA Jetson Linux Driver Package design weakness (26-4-2022)
Preface: Embedded AI solutions on the Linux platform. With the superior performance, small size and low power consumption, it will be able to do more real-time processing at the demanding environment than ever before. Background: NVIDIA® Jetson Nano™ Developer Kit is a small, powerful computer that lets you run multiple neural networks in parallel for…
-
Redis vulnerabilities – Lua readonly tables (CVE-2022-24736, CVE-2022-24735) – 27th April 2022
Preface: Complex data queries not to use Redis as a Database.Big data and the new phenomenon open data are closely related but they’re not the same. Open data is information that is available to the public, regardless of its intended purpose. Background: Redis is designed to be accessed by trusted clients inside trusted environments. This…
-
Big data perspective , CVE-2022-24706: Apache CouchDB Remote Privilege Escalation (26th April 2022)
Preface: NoSQL is used for Big data and real-time web apps. Perhaps if you can manage big data, you can rule the AI zone in future. Background: NoSQL is used for Big data and real-time web apps. For example, companies like Twitter, Facebook and Google collect terabytes of user data every single day. There are…
-
CVE-2022-29078 EJS package Security Focus (25th April 2022)
Preface: EJS is one of the most popular template engines for JavaScript. One of the reasons to choose it is that EJS code looks like pure HTML. Background: EJS or Embedded Javascript Templating is a templating engine used by Node. js. The template engine helps to create an HTML template with minimal code. Also, it…
-
About CVE-2022-29582 (asynchronous I/O interface provided by Linux kernelbefore 5.17.3)
Preface: On 29th March, 2022 Linus Torvalds announced the release and general availability of Linux 5.17 as the latest and greatest kernel series for Linux-based operating systems adding new features and improving hardware support. Background: As HPC workflows become more complex, data management services need to perform asynchronous I/O operations in the background. In addition,…