riscv-isa-sim security vulnerabilities

riscv-isa-sim is a RISC-V ISA simulator. A security vulnerability exists in riscv-isa-sim, which stems from the mcontrol.action component containing an error mask that could lead to a denial of service DoS...

CVE-2022-34643: Improper Handling of Exceptional Conditions

RISCV ISA Sim commit ac466a21df442c59962589ba296c702631e041b5 implements the incorrect exception priotrity when accessing memory...

PT-2022-22266

Name of the Vulnerable Software and Affected Versions RISCV ISA Sim affected versions not specified Description The issue is related to the implementation of exception priority when accessing memory in RISCV ISA Sim. Specifically, commit ac466a21df442c59962589ba296c702631e041b5 is mentioned as...

isa-surveys.com Cross Site Scripting vulnerability OBB-2488958

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GSD-2022-1000626 powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06

powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.5 by commit...

PT-2022-28900

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.8 through 5.16.4 Description The issue is related to the powerpc64/bpf in the Linux Kernel, where 'ldbrx' is not limited to processors compliant with ISA v2.06. The actual impact and attack plausibility have not yet bee...

GSD-2022-1000261 powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06

powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.19 by commit...

GSD-2022-1000198 powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06

powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.96 by commit...

PT-2022-28539

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.8 through 5.15.18 Description The issue is related to the powerpc64/bpf in the Linux Kernel, where 'ldbrx' is not limited to processors compliant with ISA v2.06. The actual impact and attack plausibility have not yet be...

PT-2022-28476

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.96 Description The issue is related to the powerpc64/bpf component, specifically with the 'ldbrx' instruction, which needs to be limited to processors compliant with ISA v2.06. The actual impact and attack...

NIST Cybersecurity Framework: A Quick Guide for SaaS Security Compliance

When I want to know the most recently published best practices in cyber security, I visit The National Institute of Standards and Technology NIST. From the latest password requirements NIST 800-63 to IoT security for manufacturers NISTIR 8259, NIST is always the starting point. NIST plays a key...

PT-2021-7762 · Rockwell Automation · Isagraf Runtime

Name of the Vulnerable Software and Affected Versions: Rockwell Automation ISaGRAF Runtime versions 4.x through 5.x Description: The issue concerns the encryption of passwords used to execute privileged commands in the ISaGRAF Runtime. Specifically, a fixed key value is used with the tiny...

Security Analysis of CHERI ISA

Is it possible to get to a state where memory safety issues would be deterministically mitigated? Our quest to mitigate memory corruption vulnerabilities led us to examine CHERI Capability Hardware Enhanced RISC Instructions, which provides memory protection features against many exploited...

Security Analysis of CHERI ISA

Is it possible to get to a state where memory safety issues would be deterministically mitigated? Our quest to mitigate memory corruption vulnerabilities led us to examine CHERI Capability Hardware Enhanced RISC Instructions, which provides memory protection features against many exploited...

Security Analysis of CHERI ISA

Is it possible to get to a state where memory safety issues would be deterministically mitigated? Our quest to mitigate memory corruption vulnerabilities led us to examine CHERI Capability Hardware Enhanced RISC Instructions, which provides memory protection features against many exploited...

Connected Car Standards – Thank Goodness!

Intelligent transportation systems ITS require harmonization among manufacturers to have any chance of succeeding in the real world. No large-scale car manufacturer, multimodal shipper, or MaaS Mobility as a Service provider will risk investing in a single-vendor solution. Successful ITS require...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1488)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Remote iPhone Exploitation Part 3: From Memory Corruption to JavaScript and Back -- Gaining Code Execution

Posted by Samuel Groß, Project Zero This is the third and last post in a series about a remote, interactionless iPhone exploit over iMessage. The first blog post introduced the exploited vulnerability, and the second blog post described a way to perform a heapspray, leaking the shared cache base...

CSET Version 9.2 Now Available

The Cybersecurity and Infrastructure Security Agency CISA has released version 9.2 of its Cyber Security Evaluation Tool CSET. CSET is a desktop software tool that guides asset owners and operators through a consistent process for evaluating control system networks as part of a comprehensive...

CVE-2019-15847

The POWER9 backend in GNU Compiler Collection GCC before version 10 could optimize multiple calls of the builtindarn intrinsic into a single call, thus reducing the entropy of the random number generator. This occurred because a volatile operation was not specified. For example, within a single...