Tmotfl

**Nome do Software Vulnerável e Versões Afetadas** NETGEAR (versões afetadas não especificadas) **Descrição** Ocorre um estouro de buffer em certos modelos NETGEAR, que pode ser explorado por um administrador do dispositivo para interromper temporariamente a operação normal do dispositivo afetado. Um estouro de buffer é uma condição em que um programa grava mais dados em um bloco de memória do que ele pode suportar, podendo levar a falhas ou comportamentos inesperados. **Recomendações** No momento, não há informações sobre uma versão mais recente que contenha a correção para esta vulnerabilidade.

**Nome do Software Vulnerável e Versões Afetadas** NETGEAR (versões afetadas não especificadas) **Descrição** Um estouro de buffer (buffer overflow) ocorre quando um programa grava mais dados em um bloco de memória, ou buffer, do que ele foi projetado para suportar, potencialmente sobrescrevendo a memória adjacente. Neste caso, o problema permite que um usuário administrador autenticado cause a indisponibilidade temporária do dispositivo. **Recomendações** No momento, não há informações sobre uma versão mais recente que contenha a correção para esta vulnerabilidade.

**Nome do Software Vulnerável e Versões Afetadas** NETGEAR (versões afetadas não especificadas) **Descrição** Ocorre um estouro de buffer devido à validação insuficiente de buffers. Isso permite que administradores autenticados conectados à rede local façam modificações não autorizadas no software e nas funcionalidades do roteador.

**Name of the Vulnerable Software and Affected Versions** MySQL Installer versions prior to 1.6.8 **Description** The issue is related to insufficient input validation in the MySQL Installer product, specifically in the Installer: General component. This vulnerability can be easily exploited by a low-privileged attacker with logon access to the infrastructure where MySQL Installer executes, allowing them to compromise MySQL Installer. Successful attacks require human interaction from a person other than the attacker and may significantly impact additional products. The vulnerability can result in unauthorized creation, deletion, or modification access to critical data or all MySQL Installer accessible data, as well as the ability to cause a hang or frequently repeatable crash of MySQL Installer. **Recommendations** For versions prior to 1.6.8, update to version 1.6.8 or later to resolve the issue. As a temporary workaround, consider restricting access to the MySQL Installer to minimize the risk of exploitation. Avoid using the vulnerable component until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** ASUS RT-AC86U (affected versions not specified) **Description** The issue exists due to the lack of neutralization of special elements used in the operating system command. A remote attacker with normal user privileges can exploit this to perform a command injection attack, executing arbitrary system commands, disrupting the system, or terminating the service. The vulnerability is related to the failure to filter special characters for parameters in specific web URLs. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ASUS RT-AC86U (affected versions not specified) **Description** The issue is related to a stack-based buffer overflow vulnerability in the cgi function of the ASUS RT-AC86U router's firmware, caused by insufficient validation of network packet header length. This allows a remote attacker with administrator privileges to execute arbitrary system commands, disrupt the system, or terminate the service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** GPAC version 2.3-DEV-rev35-gbbca86917-master **Description** A critical issue has been found in the file filters/load text.c of GPAC, related to buffer overflow due to unchecked input size during buffer copying. This can be exploited to overflow memory buffers. Local access is required for this attack. The issue has been publicly disclosed and may be exploited. **Recommendations** To fix this issue, it is recommended to apply a patch. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** GPAC version 2.3-DEV-rev35-gbbca86917-master **Description** A vulnerability has been found in the function `gf av1 reset state` of the file `media tools/av parsers.c`, which leads to double free. The manipulation can be launched on the local host. The exploit has been disclosed to the public and may be used. **Recommendations** To fix this issue, it is recommended to apply a patch. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** GPAC version 2.3-DEV-rev35-gbbca86917-master **Description** A heap-based buffer overflow issue affects the `gf m2ts process sdt` function in the `media tools/mpegts.c` file. This issue can be exploited locally, potentially leading to a denial of service. The exploit has been publicly disclosed. **Recommendations** To fix this issue, apply a patch to the affected version of GPAC. As a temporary workaround, consider disabling the `gf m2ts process sdt` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** DrayTek Vigor 2960 versions 1.5.1.4 through 1.5.1.5 **Description** A critical vulnerability has been found in the Web Management Interface of DrayTek Vigor 2960, specifically in the function `getSyslogFile` of the file `mainfunction.cgi`. The issue is related to incorrect restriction of directory path names, which can lead to path traversal. This allows a remote attacker to gain unauthorized access to confidential system files. The exploit has been disclosed to the public and may be used. **Recommendations** For DrayTek Vigor 2960 versions 1.5.1.4 through 1.5.1.5, consider disabling the `getSyslogFile` function of the `mainfunction.cgi` file as a temporary workaround to minimize the risk of exploitation. Restrict access to the Web Management Interface to reduce the attack surface. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** DrayTek Vigor versions 1.5.1.4 through 1.5.1.5 **Description** The issue is related to the function sub 1225C in the mainfunction.cgi script of the DrayTek Vigor web interface, where inadequate data cleaning on the management level can be exploited. This can allow a remote attacker to execute arbitrary commands. The manipulation of the `password` argument leads to command injection, and the attack can be launched remotely. **Recommendations** For DrayTek Vigor versions 1.5.1.4 through 1.5.1.5, consider disabling the mainfunction.cgi script or restricting access to it until a fix is available. As a temporary workaround, avoid using the `password` argument in the affected web management interface to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** DrayTek Vigor 2960 versions 1.5.1.4 through 1.5.1.5 **Description** A critical vulnerability has been found in the Web Management Interface of DrayTek Vigor 2960. The issue is related to the function `sub 1DF14` of the file `/cgi-bin/mainfunction.cgi`. The manipulation of the argument `option` with the input `/../etc/passwd-` leads to path traversal. This allows an attacker to gain unauthorized access to confidential system files. The attack can be launched remotely. The exploit has been disclosed to the public. **Recommendations** For DrayTek Vigor 2960 versions 1.5.1.4 through 1.5.1.5, as a temporary workaround, consider disabling the `sub 1DF14` function until a patch is available. Restrict access to the `/cgi-bin/mainfunction.cgi` file to minimize the risk of exploitation. Avoid using the `option` argument in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.