Daniel Shapira

O problema está relacionado ao fato de o Jfrog Artifactory utilizar senhas padrão, como `password`, para contas administrativas e não exigir que os usuários as alterem. Isso pode permitir que invasores não autorizados, por meio da rede, comprometam totalmente o Jfrog Artifactory.

The issue is related to an integer overflow that could lead to a buffer overflow problem. This occurs when receiving packets over the network, specifically with the NE2000 NIC emulation support. A user inside the guest could exploit this flaw to crash the Qemu process, resulting in a denial of service (DoS).

The issue allows attackers to cause a denial of service or possibly have unspecified other impact due to `qemu deliver packet iov` in `net/net.c` accepting packet sizes greater than `INT MAX`.

Name of the Vulnerable Software and Affected Versions: QEMU (affected versions not specified) Description: The issue is related to an integer overflow in the `rtl8139 do receive` function of the QEMU hardware emulator. This can lead to a buffer overflow. The vulnerability may allow a remote attacker to cause a denial of service. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to the sr do ioctl function in the Linux kernel, which allows local users to cause a denial of service or possibly have other unspecified impacts due to a stack-based buffer overflow. This occurs because sense buffers have different sizes at the CDROM layer and the SCSI layer. An example of exploitation is through a CDROMREADMODE2 ioctl call.

The issue is related to the try read command function in memcached.c, which allows remote attackers to cause a denial of service (segmentation fault) via a request to add or set a key. This is due to a comparison between signed and unsigned int, triggering a heap-based buffer over-read. The vulnerability exists because of an incomplete fix for a previous issue.