Guido Vranken

توجد مشكلة «التحرير المزدوج» في الدالة `parse def()` الموجودة في ملف `src/conf.c`. تحدث هذه المشكلة عندما يقوم النظام بتحليل كتل التكوين المركبة أو المصفوفية المتداخلة، ويفشل في التحقق من قيم الإرجاع قبل المتابعة. ونتيجة لذلك، يتم استدعاء الدالة `snd config delete()` مرتين على نفس العقدة التي تم تحريرها بالفعل، مما قد يؤدي إلى تلف الذاكرة، أو كتابة مؤشر NULL، أو قراءة ذاكرة غير صالحة إذا قدم المهاجم نص تكوين ALSA مصممًا بشكل خبيث.

يمكن لخادم ضار استغلال ميزة TLS OCSP stapling عن طريق إرسال استجابة مُصممة خصيصًا عبر ملحق `status request`. يؤدي ذلك إلى حدوث خطأ «التحرير المزدوج» (double-free) في مسار التحقق من شهادة العميل عند فحص الاستجابة المُدمجة. يحدث التحرير المزدوج عندما يحاول البرنامج تحرير نفس موقع الذاكرة مرتين، مما قد يؤدي إلى إتلاف ذاكرة الكومة. وقد يؤدي ذلك إلى رفض الخدمة، أو تنفيذ تعليمات برمجية يتحكم فيها المهاجم، أو سلوك آخر غير محدد. لا يتم تمكين ميزة OCSP stapling بشكل افتراضي.

يحدث خطأ في التحقق من صحة التوقيع أثناء عملية التحقق من التوقيع باستخدام خوارزمية التوقيع الرقمي للمنحنى الإهليلجي (ECDSA).

قد تؤدي معالجة محتوى ويب مصمم بشكل خبيث إلى تعطل غير متوقع للعملية بسبب التعامل غير السليم مع الذاكرة.

تحسب الدالة `CombinedMult` في الحزمة `ecc/p384` (منحنى secp384r1) قيمة غير صحيحة لبعض المدخلات. لا تؤثر هذه المشكلة على عمليات ECDH والتوقيع ECDSA التي تعتمد على هذا المنحنى. يتم حل المشكلة من خلال تنفيذ صيغ الجمع الكاملة.

تتميز الدالة `html.Parse` بتعقيد تحليلي من الدرجة الثانية عند معالجة مدخلات محددة. وقد يؤدي ذلك إلى حدوث هجوم «رفض الخدمة» (DoS) في حال أرسل المهاجم محتوى HTML مصممًا بشكل خبيث.

قد تدخل الدالة `html.Parse` في حلقة تحليل لا نهائية عند معالجة مدخلات HTML محددة. وقد يؤدي ذلك إلى حدوث هجوم رفض الخدمة (DoS) إذا قام المهاجم بتقديم محتوى HTML مصمم خصيصًا لهذا الغرض.

The issue is related to uncontrolled resource consumption in the Golang programming language. An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.

The issue arises from the `idna.encode()` function's handling of crafted input strings, which can lead to quadratic complexity and consequently, a denial of service condition. This is triggered by a crafted input that causes the `idna.encode()` function to process the input with considerable computational load, significantly increasing the processing time in a quadratic manner relative to the input size. The vulnerability may allow a remote attacker to cause a denial of service.

The issue is related to the ScalarMult and ScalarBaseMult methods of the P256 Curve in the Go programming language, which may return incorrect results when called with specific unreduced scalars. This could potentially allow a remote attacker to impact the integrity of protected information. The issue does not affect usages of crypto/ecdsa or crypto/ecdh.

The issue concerns the multiplication of certain unreduced P-256 scalars, which can produce incorrect results. However, there are no known protocols that can be attacked due to this issue. The problem arises because the P-256 assembly does not use complete addition formulas, which can lead to incorrect results when the two inputs are equal. This was previously mitigated by always reducing the scalar, but a change in the math/big rewrite removed this reduction, assuming it was not necessary.

The issue allows remote attackers to cause a denial of service (panic) via a large header to `ReadRequest` or `ReadResponse`. Server, Transport, and Client can each be affected in some configurations. A malicious HTTP server or client can cause the net/http client or server to panic. `ReadRequest` and `ReadResponse` can hit an unrecoverable panic when reading a very large header.

Name of the Vulnerable Software and Affected Versions: glibc versions prior to 2.32 Description: The issue is related to the functions cosl, sinl, sincosl, and tanl in the GNU C Library (glibc), which can cause a buffer overflow. This can lead to a denial of service by damaging the stack when calling trigonometric functions with a pseudo-zero argument. Specifically, the problem occurs when an input to an 80-bit long double function contains a non-canonical bit pattern, such as passing a 0x5d414141414141410000 value to sinl on x86 targets. Recommendations: For glibc versions prior to 2.32, update to version 2.32 or later to resolve the issue. As a temporary workaround, consider restricting the use of the vulnerable functions cosl, sinl, sincosl, and tanl until a patch is available. Avoid using non-canonical bit patterns as input to these functions to minimize the risk of exploitation.

An issue was discovered due to incorrect buffer management, allowing a remote client to cause a buffer overflow in a Squid instance acting as a reverse proxy. This can potentially impact the confidentiality, integrity, and availability of protected information.

A bug in the fork of the opkg package manager prevents correct parsing of embedded checksums in the signed repository index, allowing a man-in-the-middle attacker to inject arbitrary package payloads, which are installed without verification. This issue is related to a problem with the code that checks the SHA-256 checksums present in the signed digital signature index of packages, allowing an attacker to create conditions under which these checksums are ignored, thus bypassing the integrity checking mechanisms of the downloaded ipk resources.

The issue is related to a buffer overflow due to unbounded copying of user input. This could allow a remote attacker to access sensitive data, compromise its integrity, and potentially cause a denial of service. An attacker may also be able to execute arbitrary code or cause the application to crash by writing past the end of a buffer stored on the stack.

The issue is related to the `django.utils.text.Truncator` class, specifically the `chars()` and `words()` methods. When these methods are passed the `html=True` argument, they can be extremely slow to evaluate certain inputs due to a catastrophic backtracking vulnerability in a regular expression. This vulnerability can be exploited to cause a denial of service. The `chars()` and `words()` methods are used to implement the `truncatechars html` and `truncatewords html` template filters.

The issue is related to the HTMLParser function in django.utils.html.strip tags, which can be slow to evaluate large input sequences containing incomplete HTML entities. This can be exploited by a remote attacker to cause a denial of service.

The issue allows certain input files to cause the code to enter an infinite loop when parsed, potentially leading to a Denial of Service (DoS) attack.

The issue allows certain input files to cause the code to hang when parsed, potentially leading to a denial-of-service (DoS) attack. Note that Apache Sanselan was later renamed to Apache Commons Imaging.