Maxpl0It

اسم البرنامج المعرض للخطر والإصدارات المتأثرة: إصدارات Firefox السابقة للإصدار 149 إصدارات Firefox ESR السابقة للإصدارين 115.34 و140.9 إصدارات Thunderbird السابقة للإصدارين 149 و140.9 الوصف: يوجد عيب في مكون JIT لمحرك JavaScript، وتحديدًا مشكلة تتعلق بالتجميع الخاطئ لـ JIT. وقد يؤدي ذلك إلى مخاطر أمنية محتملة. التوصيات: تحديث Firefox إلى الإصدار 149 أو أحدث. تحديث Firefox ESR إلى الإصدار 115.34 أو أحدث، أو 140.9 أو أحدث. تحديث Thunderbird إلى الإصدار 149 أو أحدث، أو 140.9 أو أحدث.

A flaw exists in the networking subsystem of the Linux kernel, specifically within the IPv6 RPL (Routing Protocol for Low-Power and Lossy Networks) protocol implementation. The issue occurs due to improper handling of user-supplied data and incorrect calculation of the packet header size in the `ipv6 rpl segdata pos()` function located in the `net/ipv6/rpl.c` module. This can lead to an assertion failure, allowing an unauthenticated remote attacker to cause a kernel crash and a denial of service condition by sending specially crafted IPv6 packets. This protocol is typically disabled by default in most distributions and is primarily used in embedded devices operating in wireless networks with high packet loss.

The issue is related to errors in resource release in the Core component of Oracle VM VirtualBox. It allows a high-privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox, potentially causing a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. This could significantly impact additional products.

The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, allowing a high-privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise it. Successful attacks can result in the takeover of Oracle VM VirtualBox and may significantly impact additional products.

The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, allowing a high-privileged attacker with logon to the infrastructure to compromise Oracle VM VirtualBox. Successful attacks can result in the takeover of Oracle VM VirtualBox and may significantly impact additional products.

The issue is an externally controlled format-string vulnerability due to lack of protection on the admin CLI. This vulnerability can lead to code execution and privilege escalation, allowing an attacker to gain greater privileges than those of administrators. An attacker with access to an admin account could exploit this to escape the restricted CLI and execute arbitrary code.

The issue arises from an improperly neutralized element in an OS command due to lack of protection on the admin CLI, leading to code execution and privilege escalation. An attacker with access to an admin account could escape the restricted CLI and execute arbitrary shell instructions.