-
CVE-2021-29649 – Linux kernel before 5.11.11. The user mode driver (UMD) has a copy_process() memory leak (30-03-2021)
Preface: A system with a serious kernel memory leak will quickly become unusable. Tracking down memory leaks can be painful work. How do you find memory leaks in Linux?Kmemleak provides a way of detecting possible kernel memory leaks in a way similar to a tracing garbage collector. CONFIG_DEBUG_KMEMLEAK in “Kernel hacking” has to be enabled.…
-
CVE-2021-29249 Although the CVE record announce late. It it is good for studying. (29th Mar 2021)
Preface: From a investment market perspective, blockchain might become next-generation investment tool. So called investment will contain risk. For instance, Hedge Fund and currencies buy and sell on markets are risky. This atmosphere we are living in long time. So no feeling any special. BTCPay server background:– MIT License.– Anyone can deploy a server. Become…
-
OpenSSL Security Advisory – 25th Mar 2021
Preface: If you are doubts of this OpenSSL vulnerability (CVE-2021-3449 & CVE-2021-3450), you should update your current installations to OpenSSL 1.1.1k. Background: With OpenSSL, you can apply for your digital certificate (Generate the Certificate Signing Request) and install the SSL files on your server. You can also convert your certificate into various SSL formats, as…
-
Security Focus: CVE-2021-21625 (Jenkins CloudBees AWS Credentials Plugin) 23rd Mar 2021
Background: You can refer to Amazon’s Creating an IAM User in Your AWS Account page to create this IAM user. Once this is done, you can add new credentials of type Aws Credentials (specifying your Access key ID and a Secret access key).Whereby it can store Amazon IAM access keys (AWSAccessKeyId and AWSSecretKey) within the…
-
Zerologon vulnerability note – last revised (23rd Mar, 2021)
Preface: “Logic 0” and “logic 1” represent binary digits (0 and 1) or Boolean logic conditions (true and false). A vulnerability in the cryptography of Microsoft’s Netlogon process that allows an attack against Microsoft Active Directory domain controllers. Background: The algorithm originally used to encrypt the logon process in Windows NT was 2DES. Thus design…
-
Perhaps you will forget, vulnerability in VMware View Planner (CVE-2021-21978) – 21st March 2021
Preface: The Secure Development Lifecycle – From requirements to design, coding to test, the SDL strives to build security into a product or application at every step in the development process. Background: VMware View Planner is a workload generator that simulates typical user operations such as typing in Microsoft Word, playing a PowerPoint slideshow, reading…
-
CVE-2021-3195 Improper Input Validation of Dumpwallet (19th Mar 2021)
Preface: In 2020, the public doubts that Bitcoin may die. The fact is, his performance is strong. Background: Dumpwallet capable to dump all wallet keys in a human-readable format to a server-side file. When you use dumpwallet, you should expect to see several thousand lines. If you have not imported any scripts, you should have…
-
Highly Evasive Leverages (16the March, 2021)
Preface: There is a registry key in your system that can be set to prevent certain applications from running, including security software. Background: If the software developer creates a buffer and reserves 1024 bytes then tries to copy anything more than 1023 bytes (computers start counting at 0 remember) it will overflow out from the…
-
A validation of the input string will be reduced cyber attack surface on your web application -16th Mar 2021
Synopsis: The package xmlhttprequest before 1.7.0 had vulnerability occurs. The CVE-2020-28502 was published on 5th March, 2021. Background: node-XMLHttpRequest is a wrapper for the built-in http client to emulate the browser XMLHttpRequest object.This can be used with JS designed for browsers to improve reuse of code and allow the use of existing libraries. Vulnerability details:…
-
F5 network products cover a wide range. When vulnerability occur, they should be remedied as soon as possible. (CVE-2021-22991 – 12th Mar 2021)
Preface: F5 network products are commonly deployed in data center and on-premises Internet facing infrastructure. Background: F5 Network’s Traffic Management Operating System (TMOS) is not a separate operating system. It is the software foundation for all of F5’s network or traffic (not data) products including both physical or virtual platform. TMM is the core component…