Jukka Taimisto

Name of the Vulnerable Software and Affected Versions: Apache Xerces C++ versions 2.7.0 through 2.8.0 Description: A stack consumption issue allows context-dependent attackers to cause a denial of service, resulting in an application crash. This can be achieved through vectors involving nested parentheses and invalid byte values in simply nested DTD structures. Recommendations: For Apache Xerces C++ versions 2.7.0 through 2.8.0, consider updating to a newer version to mitigate the risk of a denial of service attack. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: NetBSD version 4.0 FreeBSD (affected versions not specified) KAME (affected versions not specified) Description: The issue is related to a denial of service caused by a divide-by-zero error and panic. This occurs when a malformed ICMPv6 Multicast Listener Discovery (MLD) query with a certain Maximum Response Delay value is sent to the system. The `mld input` function in the kernel is the vulnerable component. Recommendations: For NetBSD version 4.0, update the kernel to a version that fixes the `mld input` function issue. For FreeBSD, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For KAME, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue allows remote attackers to cause a denial of service via trailing zero values in the Link State Advertisement (LSA) header list of an IPv6 Database Description message. This is due to the `ospf6 lsa is changed` function in `ospf6 lsa.c` in the OSPFv3 implementation in `ospf6d`. The vulnerability can lead to disruption of confidentiality, integrity, and availability of protected information.

The issue affects the Quagga package in various Linux operating systems, including Red Hat Enterprise Linux, CentOS, SUSE Linux Enterprise, and openSUSE. It allows remote attackers to cause a denial of service (daemon crash) via an invalid Link State Advertisement (LSA) type in an IPv4 Link State Update message. The `ospf flood` function in `ospf flood.c` in `ospfd` is vulnerable. This can lead to disruption of confidentiality, integrity, and availability of protected information.

The issue is related to multiple vulnerabilities in the Quagga package, which can lead to disruption of confidentiality, integrity, and availability of protected information. Exploitation of these vulnerabilities can be done remotely. A heap-based buffer overflow in the `ecommunity ecom2str` function in `bgp ecommunity.c` in `bgpd` in Quagga before version 0.99.19 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code by sending a crafted BGP UPDATE message over IPv4.

The issue affects the Quagga package, allowing remote attackers to cause a denial of service via a Link State Update message with an invalid IPv6 prefix length. This can lead to disruption of confidentiality, integrity, and availability of protected information. The exploitation can be carried out remotely.

The issue is related to multiple vulnerabilities in the Linux kernel, specifically in the Debian GNU/Linux operating system. These vulnerabilities can be exploited remotely, leading to a denial of service and potentially disrupting the availability of protected information. The `sctp process unk param` function in `net/sctp/sm make chunk.c` is vulnerable when SCTP is enabled, allowing remote attackers to cause a system crash via an SCTPChunkInit packet containing multiple invalid parameters.