Siddharth Sharma

A flaw was found in the samba client where a malicious server can supply a pathname to the client with separators, allowing the client to access files and folders outside of the SMB network pathnames. This could enable an attacker to create files outside of the current working directory using the privileges of the client user. The issue is due to incorrect restriction of the directory path name with limited access.

The cephx authentication protocol did not correctly verify Ceph clients, making it vulnerable to a replay attack. An attacker with access to the Ceph cluster network who can sniff packets can use this issue to authenticate with the Ceph service and perform actions allowed by the service.

A flaw was found in the way signature calculation was handled by the cephx authentication protocol. An attacker with access to the Ceph cluster network who can alter the message payload can bypass signature checks done by the cephx protocol.

The issue allows local users to delete arbitrary files via a crafted file in the user's home directory. This is due to a problem in the pre-install script in the affected texlive packages.

The issue allows local users to obtain passwords in cleartext.

The issue allows remote authenticated users to bypass the max meta count constraint by sending multiple crafted requests that exceed the limit when combined.

The issue is related to the improper restriction of the pickle Python module when loading metadata. This allows remote authenticated users to execute arbitrary code via a crafted extended attribute (xattrs).

A flaw in the Ceph Object Gateway allows an authenticated attacker to launch a denial of service attack by sending null or specially crafted POST object requests.