HITCON-2023-Demo-CVE-2023-20562

HITCON 2023 데모 CVE-2023-20562 설명 이 시연은 대만에서 열린 HITCON 2023에서 진행되었습니다. 이 데모는 AMD μProf 내 AMDCpuProfiler.sys의 취약점 악용을 강조합니다. EPROCESS 토큰에 임의 쓰기를 트리거하여 SYSTEM 수준으로 권한 상승을 달성합니다. DSE 플래그를 비활성화하면 악성 서명되지 않은 드라이버를 로드할 수 있습니다. 발표에서는 또한 360 Total Security의 ObRegisterCallbacks를 무효화하여 360 Total Security의...

HITCON-2023-Demo-CVE-2023-20562

HITCON 2023 데모 CVE-2023-20562 설명 이 데모는 대만에서 열린 HITCON 2023에서 진행되었습니다. 데모는 AMD μProf 내의 AMDCpuProfiler.sys를 악용하는 방법을 보여줍니다. EPROCESS 토큰에 대해 임의 쓰기를 트리거하여 SYSTEM 수준으로 권한 상승이 이루어집니다. DSE 플래그를 비활성화하면 악성 서명되지 않은 드라이버를 로드할 수 있습니다. 발표는 또한 360 Total Security의 ObRegisterCallbacks를 무효화하여 360 Total Security의...

EUVD-2021-13140

Malware in sbrugna...

EUVD-2023-35652

Malicious code in bioql PyPI...

EUVD-2022-32171

Malicious code in bioql PyPI...

EUVD-2023-35677

Malicious code in bioql PyPI...

EUVD-2023-24735

Malicious code in bioql PyPI...

EUVD-2023-24740

Malicious code in bioql PyPI...

EUVD-2022-28760

Malicious code in bioql PyPI...

EUVD-2023-35660

Malicious code in bioql PyPI...

CVE-2023-31366

Improper input validation in AMD μProf could allow an attacker to perform a write to an invalid address, potentially resulting in denial of service...

CVE-2023-31366

Improper input validation in AMD μProf could allow an attacker to perform a write to an invalid address, potentially resulting in denial of service...

CVE-2023-31349

Incorrect default permissions in the AMD μProf installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

CVE-2023-31349

Incorrect default permissions in the AMD μProf installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

CVE-2023-31348

A DLL hijacking vulnerability in AMD μProf could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

CVE-2023-31341

Insufficient validation of the Input Output Control IOCTL input buffer in AMD μProf may allow an authenticated attacker to cause an out-of-bounds write, potentially causing a Windows® OS crash, resulting in denial of service...

CVE-2023-31341

Insufficient validation of the Input Output Control IOCTL input buffer in AMD μProf may allow an authenticated attacker to cause an out-of-bounds write, potentially causing a Windows® OS crash, resulting in denial of service...

AMD μProf 安全漏洞

AMD μProf is a software analysis tool from Ultra Micro Semiconductor AMD. A security vulnerability exists in AMD μProf that stems from insufficient validation of the input buffer, which could allow an authenticated attacker to perform out-of-bounds writes, which could result in a crash of the...

AMD µPROF Security Notice

Bulletin ID: AMD-SB-9001 Potential Impact: Varies by CVE, see descriptions below Severity: Varies by CVE, see descriptions below Summary AMD μProf “MICRO-prof” is a software profiling analysis tool for x86 applications running on Windows®, Linux® and FreeBSD® operating systems and is designed to...

CVE-2023-20556

Insufficient validation of the IOCTL Input Output Control input buffer in AMD μProf may allow an authenticated user to send an arbitrary buffer, potentially resulting in a Windows crash, leading to denial of service. Mitigation Please contact AMD support for updates...