-
Retrospective of 2022 CVE records – CVE-2022-4292 (The Silence of the Lambs on Linux) 30thDec2022
Preface: Use-After-Free (UAF) is a vulnerability related to incorrect use of dynamic memory during program operation. If after freeing a memory location, a program does not clear the pointer to that memory, an attacker can use the error to hack the program. Background: Most of the victims are based on Windows OS. But some of…
-
CVE-2022-46174 race condition issue exists within the Amazon EFS mount helper in efs-utils versions v1.34.3 and below. (28th Dec 2022)
Preface: Sometimes it is difficult to determine what the clear impact of a vulnerability is. However if there is design weakness found, it should do a corrective control. There is a race condition issue exists within the Amazon EFS mount helper in efs-utils. What is race condition in traditional understanding. When race conditions occur. A…
-
Retrospect a simple bug in smartphones software development in 2022 (28th Dec 2022)
Denial of service from the big world to the small world Preface: Perhaps the historical information can be enrich our knowledge base. Even through you think the information I posted by today not very useful. However this is so called database. See whether you are still interested in this matter today? Background: The Flutter framework…
-
Santa patched his ksmbd kernel server (SMB/CIFS server) just before Christmas break. (26th Dec 2022)
Preface: The researchers found that 91.88 percent of attacks targeting port 445, the most common SMB port, attempted to use the EternalBlue exploit. Even if this is a Linux environment, when the server supports the SMB version of the protocol. It more or less may have the opportunity to integrate with other peer servers, especially…
-
CVE-2022-46702 Apple iOS/iPadOS up to 16.1.2 GPU Drivers memory corruption (23rd Dec 2022)
Preface: When an external GPU is connected to the iOS system. Refer to attached diagram , it will perform compute simulations on that external GPU. And thus graphics rendering on a built-in GPU. According the current GPU design. Do you think is there desugn weakness happen here. For instance, memory access control and access permission.…
-
Commonplace, smartphone OS vulnerability (22nd Dec 2022)
Preface: The software writes data past the end, or before the beginning, of the intended buffer. Typically, this can result in corruption of data, a crash, or code execution. Background: In the Android system, an application has at least one process, and each process has its own independent resources and memory space. Other processes cannot…
-
CVE-2022-43875 It looks like the flaw is not in cyber security. This is a design flaw. (21st Dec 2022)
Preface: Long time ago, blockchain developers announcement that they have developed a blockchain platform to launch a digital system for international payments capable of replacing the global Swift system. Seems they are not successful. Background: IBM FTM for swift services is certified real-time SWIFT messaging interface. Ensure faster payments in addition to SWIFT without changing…
-
CVE-2022-46400 Microchip RN4870 module firmware 1.43 (19th Dec 2022)
Preface: There are two types of paring base on BLE version: Background: The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) allows attackers to bypass passkey entry in legacy pairing. Do you think this is a fundamental problem or flaw in the product itself? I speculate this is not…
-
If the vendor does not disclose details about Android kernel design weaknesses. What are the possible weaknesses? (18th Dec 2022)
Preface: Android 13, released on August 15, 2022, is the latest version, and the recently released Android 12.1/12L includes improvements specific to foldable phones, tablets, desktop-sized screens and Chromebooks. Background: In Android 11, the Android Common Kernel v5. Before kernel 4.12, opening /dev/ion allocated an Ion client. The IOC_ION_ALLOC ioctl allocated a new buffer and…
-
Details about my research on the Windows Kernel Elevation of Privilege Vulnerability CVE-2022-44683 (December 15, 2022)
Preface: Continuing yesterday’s discussion on CVE-2022-44683. Since cve doesn’t provide technical details. This point piqued my interest. Background: NTDEF(.)H is among the headers in the Software Development Kit (SDK). It is there in the “shared” subdirectory with many other headers that are intended for use in both kernel-mode and user-mode programming. Ref: NTDEF(.)H is also…