-
CVE-2024-0122: About design weakness in NVIDIA Delegated Licensing Service (21nd Nov 2024)
Preface: NVIDIA Delegated License Service (DLS) is a component of NVIDIA License System that serves licenses to licensed clients. A DLS instance is hosted on-premises at a location that is accessible from your private network, such as inside your data center. Background: For deployment in a virtual machine, the Delegated License Server (DLS) component of…
-
CVE-2024-0138: NVIDIA Base Command Manager contains a missing authentication vulnerability in the CMDaemon component.
(Updated 11/18/2024 04:12 PM) Preface: Nvidia acquires Bright Computing, maker of Bright Cluster Manager software that controls the configuration of clustered HPC systems, including Nvidia’s own DGX servers and HGX systems manufactured by OEMs and ODMs, as well as clusters from other manufacturers. Background: NVIDIA Base Command Manager provides cluster management software for streamlining cluster…
-
CVE-2024-52316 : Unchecked Error Condition vulnerability in Apache Tomcat (19th Nov 2024)
Preface: Apache Tomcat is one of the top technologies in Java developers’ tech stacks—and for good reason. According to the 2024 Java Developer Productivity Report, 36% of Java developers use Apache Tomcat as their application server. Background: Apache Tomcat (called “Tomcat” for short) is a free and open-source implementation of the Jakarta Servlet, Jakarta Expression…
-
CVE-2024-9413 – A vulnerability has been discovered in SCP-Firmware (18 Nov 2024)
Preface: The Cortex-M3 processor is specifically developed for high-performance, low-cost platforms for a broad range of devices including microcontrollers, automotive body systems, industrial control systems and wireless networking and sensors. Background: SCP Firmware provides a software reference implementation for the System Control Processor (SCP) and Manageability Control Processor (MCP) components found in several Arm Compute…
-
CVE-2024-28028: Improper input validation in some Intel® Neural Compressor software (15-11-2024)
Preface: If you talk to God, what is the difference between human and artificial intelligence? Maybe God will say that humans and A.I are incomparable. And both cannot live together in the same place. Background: Intel Neural Compressor performs model optimization to reduce the model size and increase the speed of deep learning inference for…
-
CVE-2024-38424 Use After Free in GPS (14-12-2024)
Preface: There are four global satellite navigation systems, currently GPS (United States), GLONASS (Russian Federation), Beidou (China) and Galileo (European Union). Background: Android Opensource is called HLOS. Qualcomm’s proprietary one is called non-HLOS. The Android on Snapdragon architecture is built to allow for common feature adoption across devices with Snapdragon. It represents the software features…
-
About AMD Ryzen™ AI Software: CVE-2024-21974, CVE-2024-21975 and CVE- 2024-21976 (13Nov 2024)
Preface: A pointer is a variable that stores the memory address of another variable. Unlike typical variables that hold data like numbers or characters, pointers hold the location of where data is stored in your computer’s memory. By knowing the address, pointers can access & manipulate the data at that memory location. Background: 1.Install NPU…
-
CVE-2023-40457: About BGP transitive bit be awakened (12Nov 2024)
Preface: The core purpose of a BGP UPDATE is to tell another router some traffic it can (or can no longer) send to it. However, simply knowing directly what can be sent to another router is not very useful without context. Therefore, a BGP packet is divided into two parts: Network Layer Reachability Information (NLRI)…
-
CVE-2024-50262: About Linux Classic Berkeley Packet Filter bpf (11th Nov 2024)
Preface: Common Use Cases for BPF -Network Monitoring: Tools like tcpdump and Wireshark use BPF to capture and analyze network traffic. -Security Applications: Intrusion detection systems can use BPF to filter and inspect network packets for malicious activity. Key Features of BPF: -Packet Filtering: BPF programs can filter network packets based on various criteria, such…
-
CVE-2024-38403 – Buffer Over-read in WLAN Firmware (8th Nov 2024)
Preface: BSS Transition Management enables an AP to request a voice client to transition to a specific AP, or suggest a set of preferred APs to a voice client, due to network load balancing or BSS termination. Background: A STA receiving a BSS Transition Management Request frame may respond with a BSS Transition Management Response…