Vasyl Kaigorodov

O problema está relacionado a uma vulnerabilidade do tipo “use-after-free” na função `add post var` do componente Posthandler. Essa vulnerabilidade pode ser explorada por invasores remotos para executar código PHP arbitrário, aproveitando uma extensão de filtro de terceiros que acessa um determinado valor `ksep`.

The issue concerns mutual authentication handling.

The issue allows directory traversal via a full pathname in an archive file.

The issue concerns the validation of client certificates. When "GnuTLSClientVerify require" is set in a directory context, mod-gnutls fails to validate client certificates, allowing remote attackers to spoof clients by using a crafted certificate.

The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, by sending a crafted protocol sequence set. This problem exists due to an incomplete fix for a previous issue.

The issue allows remote attackers to conduct man-in-the-middle attacks by leveraging the use of HTTP to download Fedora Atomic updates.

The issue allows local users to delete arbitrary files due to a problem in fts.c.

The issue allows attackers to obtain sensitive information via vectors involving logging the LDAP bind credential password when TRACE logging is enabled. This affects the AdvancedLdapLoginModule in Red Hat JBoss Enterprise Application Platform (EAP).

The issue allows attackers to conduct timing attacks via unspecified vectors. This could potentially be exploited to gain sensitive information.

The issue is related to a cross-site scripting (XSS) vulnerability.

The issue allows local users to write to arbitrary files via a symlink attack. This problem exists due to the reversion of a previous fix.

The issue allows local users to write to or create arbitrary files via a symlink attack.

The issue allows local users to access VM volumes without proper permissions when live migration fails.

The issue allows remote authenticated users to write to and create arbitrary snapshot metadata files, potentially leading to the execution of arbitrary code. This is possible when another application on the system can read Lucene files and execute code from them, and the Java VM running Elasticsearch can write to a location readable and executable by the other application.

The issue allows remote authenticated users to download attachments linked to arbitrary private projects. This is possible when the threshold to access files is set to ANYBODY. The `file id` parameter in the "file download.php" endpoint is used to exploit this issue.

The issue allows local users to obtain sensitive information by reading files in /var/log/cron due to weak permissions used by rsyslog for generating log files.

The cipherstring parsing code in nss compat ossl has an issue when in multi-keyword mode, where it does not match the expected set of ciphers for a given cipher combination. This could allow attackers to have an unspecified impact via unknown vectors.

The issue allows remote attackers to trigger a denial of service, resulting in a runtime exception and process crash.

A cross-site request forgery (CSRF) issue exists due to null or malformed token identifiers in the Zend/Validator/Csrf component.

The issue allows remote attackers to cause a denial of service, resulting in a crash.