每日安全动态推送(3-3)

Tencent Security Xuanwu Lab Daily News

• Re: sudo: double free with per-command chroot sudoers rules:
https://seclists.org/oss-sec/2023/q1/120

   ・ sudo又出现了漏洞，不过这次需要在/etc/sudoers配置了chroot之后才能触发 – Atum

• Linux kernel: CVE-2023-1118: UAF vulnerabilities in “drivers/media/rc” directory:
https://seclists.org/oss-sec/2023/q1/128

   ・ Linux内核UAF漏洞（CVE-2023-1118）细节 – P4nda

• Introducing ChatGPT and Whisper APIs:
https://openai.com/blog/introducing-chatgpt-and-whisper-apis

   ・ OpenAI引入可调用ChatGPT的API，价格是之前同类模型的十分之一 – Atum

• 针对进程设置路由规则 | 卡瓦邦噶！:
https://www.kawabangga.com/posts/4935

   ・ 针对进程设置路由规则 – lanying37

• Active Exploitation of ZK Framework CVE-2022-36537:
https://blog.rapid7.com/2023/03/01/etr-active-exploitation-of-zk-framework-cve-2022-36537/

   ・ ZK Framework在22年5月份修复的漏洞CVE-2022-36537被攻击者广泛利用，能够实现远程命令执行、安装恶意驱动等。 – keenan

• [Tools] README.md:
https://github.com/gojue/ecapture

   ・ 基于eBPF技术实现TLS加密的明文捕获，无需CA证书。 – keenan

• Root Cause Analysis of the in the wild JIT bug (CVE-2022-42856):
https://voidistaff.github.io/safari/2023/02/20/CVE-2022-42856.html

   ・ Apple webkit 2022年在野漏洞CVE-2022-42856的root cause分析 – xmzyshypnc

• BlackLotus UEFI bootkit: Myth confirmed | WeLiveSecurity:
https://www.welivesecurity.com/2023/03/01/blacklotus-uefi-bootkit-myth-confirmed/

   ・ 关于BlackLotus UEFI bootkit的详细分析。这个bootkit利用UEFI安全启动的nday漏洞绕过安全启动并在启动过程中加载恶意的内核模块。 – Atum

* 查看或搜索历史推送内容请访问：
https://sec.today

* 新浪微博账号：腾讯玄武实验室
https://weibo.com/xuanwulab

原文始发于微信公众号（腾讯玄武实验室）：每日安全动态推送(3-3)