-
Apple released security update (11th Oct, 2021)
Preface: For our customers’ protection, Apple doesn’t disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Background: The assert macro performs a runtime check of the given condition. For example: When a buffer maximum is 8, where the value of i is less that 8 the assert…
-
Above CVE-2021-42252 (11th October, 2021)
Preface: Linux mainly uses a paging mechanism to achieve virtual memory management. The size of the memory page is PAGE_SIZE bytes instead of 4 KB. On different platforms, the page size can range from 4 KB to 64 KB. Background: The Aspeed BMC family which is what is used on OpenPOWER machines and a number…
-
Stay alert: Recently, an unknown trojan attack in the Linux environment, a malicious ELF file with UPX compression (11th Oct, 2021)
Preface: Antivirus software isn’t entirely useless on Linux. If you are running a Linux-based file server or mail server, you will probably need antivirus help. Background: ELF file extension, an acronym for Executable and Linkable Format, is a common standard file extension used for executable, object code, core dumps and shared libraries. It was being…
-
About Apache HTTP Server 2.4.49 and 2.4.50 – CISA urges organizations to patch immediately if they haven’t already (7th Oct 2021)
Preface: the most famous UTF-8 attack was against unpatched web server. Background: The most common users of Apache HTTP Server are from Small Businesses and the Information Technology & Services industry. Perhaps How to Check the Apache Version? Open terminal application on your Linux, Windows/WSL or macOS desktop. Login to remote server using the ssh…
-
If your IoT development is based on Zigbee,perhaps Zephyr CVE will bring to your consideration. (6th Oct 2021)
Preface: Ensure that the JSON parser does not try to write a potentially unlimited number of elements into a C array of a fixed size. Background: Zephyr is a small real-time operating system (RTOS) for connected, resource-constrained and embedded devices (with an emphasis on microcontrollers) supporting multiple architectures and released under the Apache License 2.0.…
-
Fastly CDN outage, perhaps not cyber attack (4th Oct, 2021)
Preface: In addition to cyber security attacks. Cloud service providers face different technical challenges, including software and hardware levels. Background: Fastly is a company that provides content delivery network (CDN) services, mainly providing host static content and quickly showing it to Internet users. Fastly peers with other Internet Service Providers (ISPs) and Content Networks with…
-
About CVE-2021-29249, IoT vendor should stay alert! (1st Oct, 2021)
Preface: BPF is available on most Unix-like operating systems and eBPF for Linux and for Microsoft Windows. In addition, if the driver for the network interface supports promiscuous mode, it allows the interface to be put into that mode so that all packets on the network can be received, even those destined to other hosts.…