Yihan Lian

The issue is related to the `ctl getitem` method in `ntpd`, which is part of the NTP protocol implementation. It involves a buffer read beyond its boundaries in memory. This can be exploited by a remote attacker using specially crafted mode 6 packets, potentially leading to a denial of service. Additionally, there's a concern about the failure to prevent Sybil attacks from authenticated peers, which could allow an attacker to bypass security restrictions and modify a victim's clock by creating multiple ephemeral associations.

The issue is related to a use-after-free vulnerability in the implementation of the SMB1 protocol in the Samba network interaction software package. This vulnerability can be exploited by a remote attacker to gain access to confidential data, compromise data integrity, and cause a denial of service. The vulnerability allows remote attackers to execute arbitrary code via a crafted SMB1 request, potentially giving them control over the contents of dynamic memory.

The issue allows remote attackers to cause a denial of service, specifically a NULL pointer dereference, by using a crafted mov file. This is related to the dnxhd decoder in FFmpeg.

The issue allows remote attackers to cause a denial of service by preventing subsequent authentication. This is achieved by leveraging knowledge of the `controlkey` or `requestkey` and sending a crafted packet to `ntpd`, which changes the value of `trustedkey`, `controlkey`, or `requestkey`. The vulnerability exists due to a regression of a previous issue.

The issue allows remote attackers to cause a denial of service, resulting in ntpd abort. This is triggered by a large request data value, which causes the `ctl getitem` function to return a NULL value.

The issue allows remote attackers to cause a denial of service (ntpd abort) by using the same IP address multiple times in an unconfig directive when mode7 is enabled.

The issue allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large `hmode` value. This is related to the `MATCH ASSOC` function.

The issue is caused by an integer overflow in the x86 shadow pagetable code. This can be exploited by a local attacker to cause a denial of service, resulting in a host crash, or possibly gain privileges by shadowing a superpage mapping.