Mes: junio 2020

Statement on NSF Proposal Deadlines

Statement on NSF Proposal Deadlines

NSF logo

The National Science Foundation is mindful of the challenges many in our country face today. We also are acutely aware that while the research community is dedicated to its work, science may not be at the forefront of everyone’s minds during this particular moment in our nation’s history. With this in mind, NSF has decided to extend some of our upcoming proposal deadlines where possible. In …

More at https://www.nsf.gov/news/news_summ.jsp?cntn_id=300767&WT.mc_id=USNSF_51&WT.mc_ev=click


This is an NSF News item.

Published June 16, 2020 at 01:00PM
Read more at nsf.gov

New vulnerability on the NVD: CVE-2019-18614

On the Cypress CYW20735 evaluation board, any data that exceeds 384 bytes is copied and causes an overflow. This is because the maximum BLOC buffer size for sending and receiving data is set to 384 bytes, but everything else is still configured to the usual size of 1092 (which was used for everything in the previous CYW20719 and later CYW20819 evaluation board). To trigger the overflow, an attacker can either send packets over the air or as unprivileged local user. Over the air, the minimal PoC is sending "l2ping -s 600" to the target address prior to any pairing. Locally, the buffer overflow is immediately triggered by opening an ACL or SCO connection to a headset. This occurs because, in WICED Studio 6.2 and 6.4, BT_ACL_HOST_TO_DEVICE_DEFAULT_SIZE and BT_ACL_DEVICE_TO_HOST_DEFAULT_SIZE are set to 384.

Published at: June 16, 2020 at 10:15AM
View on website