This dangerous OpenSSL vulnerability can easily be triggered | CVE-2022-2274 Explained скачать в хорошем качестве

This dangerous OpenSSL vulnerability can easily be triggered | CVE-2022-2274 Explained

We discuss the CVE-2022-2274 OpenSSL Vulnerability. The OpenSSL 3.0.4 release introduced a serious bug in the RSA implementation for X86_64 CPUs supporting the AVX512IFMA instructions. This issue makes the RSA implementation with 2048 bit private keys incorrect on such machines and memory corruption will happen during the computation. As a consequence of the memory corruption an attacker may be able to trigger a remote code execution on the machine performing the computation. 0:00 Intro 1:00 CVE-2022-2274 3:00 AVX512IFMA CISC 5:00 How the bug works 7:10 How can it be triggered Resources https://www.openssl.org/news/secadv/2... https://github.com/openssl/openssl/is... https://guidovranken.com/2022/06/27/n... https://eprint.iacr.org/2018/335 https://github.com/openssl/openssl/co... https://linux.die.net/man/3/bn_internal https://www.microfocus.com/documentat... https://www.microcontrollertips.com/r... Fundamentals of Networking for Effective Backends udemy course (link redirects to udemy with coupon) https://network.husseinnasser.com Fundamentals of Database Engineering udemy course (link redirects to udemy with coupon) https://database.husseinnasser.com Introduction to NGINX (link redirects to udemy with coupon) https://nginx.husseinnasser.com Python on the Backend (link redirects to udemy with coupon) https://python.husseinnasser.com Become a Member on YouTube    / @hnasr   Arabic Software Engineering Channel    / @husseinnasser   🔥 Members Only Content    • Members-only videos   🏭 Backend Engineering Videos in Order https://backend.husseinnasser.com 💾 Database Engineering Videos    • Database Engineering   🎙️Listen to the Backend Engineering Podcast https://husseinnasser.com/podcast Gears and tools used on the Channel (affiliates) 🖼️ Slides and Thumbnail Design Canva https://partner.canva.com/c/2766475/6... Stay Awesome, Hussein