-
CVE-2022-42292 : Nvidia fixed GeForce Experience design weakness (13th Feb 2023 )
Preface: This design weakness was released 30th Jan 2023. However, this vulnerability is known as CVE-2022-42292 since 10/03/2022. But it already been fixed. Background: The GeForce Experience features a host of performance and configuration tweaks for games, automatic driver updates for your GPU, Nvidia Shadowplay for live streaming, integrated game filters (like Instagram filters but…
-
CVE-2023-23625 Certain versions of Go-unixfs from Ipfs contain vulnerability (9th Feb 2023)
Preface: AI system infrastructure may not have a mature model, it will continue forever, without end. Perhaps this is true sustainability. Since the key component is the computer. So the only thing that slows him down is software or hardware bugs. Background: Cryptocurrency technology fully utilise the concept of Blockchain. Seems the advantage of cryptocurrency…
-
CVE-2023-0286: X.400 address type confusion in X.509 GeneralName. What exactly does it mean? (8th Feb 2023)
Preface: What is the benefits of corrective action. A motivation to maintain sustainability. Background: Background: X.509 describes an approach to providing and managing authentication using asymmetric cryptography, generally referred to as Public Key Infrastructure (PKI).If X.400 defined authentication mechanism using x.509 PKI:It enhance end to end services for content integrity, message origin authentication and message…
-
CVE-2023-23931 – cryptography (7th Feb 2023)
Preface: PyCrypto is no longer under active development (project is dead – 2015). For details, see the link – https://github.com/pycrypto/pycrypto/issues/173“cryptography” is a package which provides cryptographic recipes and primitives to Python developers. The goal is for it to be your “cryptographic standard library”. It supports Python 3.6+ and PyPy3 7.2+. Background: “cryptography” is a package…
-
Whether it is the last round of remediation on CVE-2022-26373? Intel’s Enhanced Indirect Branch Restricted Speculation (eIBRS) – 6th Feb 2023
Preface: CVE-2022-26373 technical detail has released to public on 9th Aug 2022. Till end of Jan, 2023 it still has update on this vulnerability. For example, Red Hat fixed this vulnerability in their product Enterprise Linux 7 on 3rd Nov 2022. Since then it conducting the remediation to their product line. Perhaps the remediation on…
-
CVE-2022-31711 – VMware vRealize Log Insight 8.x prior to 8.10.2 (Updated On: 2023-01-31)
Preface: As time goes by, Log management is a mandatory setting in the digital world. Log management core architecture design involves a lot of software design. Therefore, you will be exposed to different forms of cyber attacks. So you need to watch out and protect yourself from harm. Background: Log Insight includes the following key…
-
CVE-2023-20532 – See what’s going on with this vulnerability? (1st Feb 2023)
Preface: As usual when you read a vulnerability bulletin. The vendor sometimes do not disclose technical details to the public. If you will read daily renewal CVE records. Maybe you feel the same way I do. CPU is one of the key topics of the vulnerability database. Since the supplier has the right to secrecy.…
-
CVE-2023-0240 LINUX KERNEL until 5.10.160 IO_URING (IO_PREP_ASYNC_WORK) memory corruption (30th Jan 2023)
Preface: The basic idea behind AIO is to allow a process to initiate a number of I/O operations without having to block or wait for any to complete. Background: System calls are how a program enters the kernel to perform some task. Programs use system calls to perform a variety of operations such as: creating…
-
About CVE-2023-0394 (30th Jan 2023)
Preface: Believed that this design weakness already been fixed before CVE release to public. So do not worry about that.To become secure, since a known Potential issues of IPv6 extension headers. Therefore , both stateful and stateless firewalls should do a deep inspection. Otherwise, it can do the evasion silently. Background: From an early deployment…
-
Speculation – Cause of Microsoft Edge (Chromium-based) Vulnerabilities (25th Jan 2023)
Preface: Edge was initially built with Microsoft’s own proprietary browser engine, EdgeHTML, and their Chakra JavaScript engine. In late 2018, it was announced that Edge would be completely rebuilt as a Chromium-based browser with Blink and V8 engines. The new Microsoft Edge is based on Chromium and was released on January 15, 2020. It is compatible…