Stefan Cornelius

Foi descoberta uma falha no pacote mholt/archiver, permitindo que um invasor crie um arquivo tar especialmente criado. Ao ser descompactado, esse arquivo pode permitir o acesso a arquivos ou diretórios restritos. A vulnerabilidade pode permitir a criação ou a sobrescrita de arquivos com os privilégios do usuário ou do aplicativo que utiliza a biblioteca.

The issue is related to Reflected XSS on the PHAR 403 and 404 error pages via request data of a request for a .phar file. This occurs due to an incomplete fix for a previous issue, allowing a remote attacker to perform cross-site scripting attacks.

Name of the Vulnerable Software and Affected Versions: httpd version 2.2.15-60 Description: A regression was found in httpd, causing comments in the "Allow" and "Deny" configuration lines to be parsed incorrectly. This issue is related to the use of memory after it has been freed when processing comments in the Allow and Deny lines of the Limit directive in the .htaccess configuration file. Exploitation of this issue may allow a remote attacker to cause a crash of the httpd child process or gain access to restricted HTTP resources. Recommendations: For httpd version 2.2.15-60, consider updating to a newer version that includes a fix for this issue, as the current version may allow unintended access to restricted HTTP resources due to incorrect parsing of comments in configuration lines.

The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a font name, specifically in the FontManager. get nix font path function in formatters/img.py.

The issue allows local users to bypass intended Secure Boot restrictions and execute non-verified code via a crafted multiboot or multiboot2 module in the configuration file. Physically proximate attackers can also bypass intended Secure Boot restrictions and execute non-verified code via the boot menu. The vulnerability is related to insufficient access control to files.

An integer overflow issue has been reported in the `general composite rect()` function. This issue could be exploited by an attacker to cause an application using pixman to crash or potentially execute arbitrary code.

The issue is related to an integer overflow in the texttopdf function of the cups-filters package, which can cause a heap-based buffer overflow. This can lead to a denial of service or possibly allow remote attackers to execute arbitrary code via a crafted line size in a print job.

The issue is related to a heap-based buffer overflow in the DecodeImage function, which can be triggered by a crafted "run-length count" in an image in a WMF file. This can cause a denial of service (crash) or possibly allow remote attackers to execute arbitrary code.

A heap-based buffer overflow issue allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted BMP image.

The issue is related to a heap-based buffer overflow in the read xwd cols function in the X Window Dump (XWD) plug-in, which can be exploited by remote attackers using an X Window System (XWD) image dump with more colors than color map entries, potentially leading to a denial of service (crash) and possibly the execution of arbitrary code. Additionally, multiple vulnerabilities in the gimp-debuginfo package may lead to violations of confidentiality, integrity, and availability of protected information, and these vulnerabilities can be exploited remotely.

The issue allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. This is a different vulnerability than the one identified in CVE-2013-5850. It is also related to an Oracle Java ObjectOutputStream Sandbox Bypass Remote Code Execution issue.

The issue allows remote attackers to affect confidentiality, integrity, and availability. It is related to vectors concerning JNDI.

The issue affects confidentiality, integrity, and availability. It is related to Libraries, but the exact vectors are unknown. There is no information about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

The issue allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

The issue affects confidentiality and integrity via unknown vectors related to Libraries. It allows remote attackers to exploit the vulnerability.

The issue affects confidentiality, integrity, and availability. It is related to 2D and can be exploited by remote attackers via unknown vectors.

The issue allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXP.

The issue affects confidentiality and integrity via unknown vectors related to Javadoc. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited.

The issue affects confidentiality, integrity, and availability. It is related to vectors in CORBA.

The issue affects the Java Runtime Environment component, allowing local users to impact confidentiality, integrity, and availability through unknown vectors related to Networking. There are claims that this issue may be related to improper enforcement of exclusive port binds when running on Windows, potentially allowing attackers to bind to ports that are already in use.