Gabriel Campana

O problema está relacionado à validação inadequada de entradas, o que pode permitir que um usuário com privilégios potencialize a escalada de privilégios por meio de acesso local.

O problema está relacionado a um controle de acesso inadequado no aplicativo Reminder, permitindo que invasores registrem lembretes ou executem atividades exportadas remotamente. Isso pode afetar potencialmente um grande número de dispositivos em todo o mundo, embora o número exato não tenha sido especificado.

The issue allows crafted D-Bus messages to the host to be used to break out of the sandbox. This is due to differences in whitespace handling between the proxy and the daemon.

The issue is related to a memory leak that can be triggered when specific options such as `--add-mac`, `--add-cpe-id`, or `--add-subnet` are used. This allows remote attackers to cause a denial of service by consuming memory through vectors involving DNS response creation.

The issue is caused by an integer underflow in the `add pseudoheader` function of the Dnsmasq DNS server when the `--add-mac`, `--add-cpe-id`, or `--add-subnet` option is specified. This allows a remote attacker to cause a denial of service via a specially crafted DNS request.

The issue is a heap-based buffer overflow that can be triggered by a crafted DNS response, allowing remote attackers to cause a denial of service or execute arbitrary code. This can occur due to a missing bounds check in the `do rfc1035 name` function of `util.c`, potentially leading to an out of bounds write. The exploitation of this issue does not require user interaction and can result in remote code execution, denial of service, or an out of memory situation.

The issue is caused by a stack-based buffer overflow in the DNS server. It can be exploited by a remote attacker using a specially crafted DHCPv6 request, potentially leading to a denial of service or the execution of arbitrary code.

The issue is caused by a heap-based buffer overflow in the dynamic memory of the DNS server. This can be exploited by a remote attacker using a specially crafted IPv6 request, potentially allowing them to cause a denial of service or execute arbitrary code.

The issue is related to deficiencies in handling forwarded DHCPv6 requests, which can be exploited by a remote attacker to disclose sensitive information by injecting special elements into a command. This can allow remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests.

The issue allows remote attackers to cause a denial of service, resulting in heap corruption and a crash, through vectors involving the length of a string. This is due to a problem in the format send to gui function in the format parsing code.

The issue allows remote attackers to cause a denial of service, resulting in heap corruption and crash, via an incomplete 24bit color code. This occurs in the unformat 24bit color function within the format parsing code when Irssi is compiled with true-color enabled.

The issue concerns Apport, where any Python module in sys.path can be imported under specific conditions. This occurs when the command line of the process triggering the coredump is Python and the first argument is -m. The function python module path is involved in this issue.

Name of the Vulnerable Software and Affected Versions: Cisco Secure ACS versions 3.x through 3.3(4) Build 12 patch 6 Cisco Secure ACS versions 4.0.x Cisco Secure ACS versions 4.1.x through 4.1(4) Build 13 Patch 10 Cisco Secure ACS versions 4.2.x through 4.2(0) Build 123 Patch 3 Description: The issue arises from improper handling of an EAP Response packet where the length field value exceeds the actual packet length. This can be exploited by remote authenticated users to cause a denial of service, leading to the crash of the CSRadius and CSAuth services, or potentially execute arbitrary code. The exploitation can occur through crafted RADIUS packets, specifically EAP-Response/Identity, EAP-Response/MD5, or EAP-Response/TLS Message Attribute packets. Recommendations: For Cisco Secure ACS versions 3.x through 3.3(4) Build 12 patch 6, update to version 3.3(4) Build 12 patch 7 or later. For Cisco Secure ACS versions 4.0.x, update to a version outside of the 4.0.x range, as no specific fix is mentioned within this range. For Cisco Secure ACS versions 4.1.x through 4.1(4) Build 13 Patch 10, update to version 4.1(4) Build 13 Patch 11 or later. For Cisco Secure ACS versions 4.2.x through 4.2(0) Build 123 Patch 3, update to version 4.2(0) Build 124 Patch 4 or later.

The issue is related to an integer overflow in the `sctp getsockopt local addrs old` function, which is part of the Stream Control Transmission Protocol (sctp) functionality. This overflow can be triggered by local users through vectors involving a large `addr num` field in an `sctp getaddrs old` data structure, leading to a denial of service (resource consumption and system outage).