Ainevsia

**Name of the Vulnerable Software and Affected Versions** Solana solana rbpf versions prior to 0.2.29 **Description** The issue is related to an addition integer overflow that can occur due to invalid ELF program headers. This can cause a panic in the elf.rs module when a malformed eBPF program is encountered. **Recommendations** For versions prior to 0.2.29, update to version 0.2.29 or later to resolve the issue. As a temporary workaround, consider restricting the use of malformed eBPF programs to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** RICOH Printer series SP products versions 1.06 **Description** The issue is a stack buffer overflow in the file /etc/wpa supplicant.conf, which allows attackers to cause a Denial of Service (DoS) via crafted overflow data. **Recommendations** For version 1.06, update the firmware to a version that fixes the stack buffer overflow issue in the /etc/wpa supplicant.conf file. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Xerox Phaser 4622 version 35.013.01.000 **Description** A buffer overflow issue was discovered in the function sub 3226AC via the `TIMEZONE` variable, allowing attackers to cause a Denial of Service (DoS) via crafted overflow data. **Recommendations** For Xerox Phaser 4622 version 35.013.01.000, consider restricting the use of the `TIMEZONE` variable until a patch is available. As a temporary workaround, consider disabling the function sub 3226AC to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers (affected versions not specified) **Description** A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. This is due to insufficient user input validation. An attacker could exploit this by sending a crafted request to the web-based management interface. A successful exploit could allow the attacker to execute arbitrary commands on an affected device using root-level privileges. Due to the nature of the vulnerability, only commands without parameters can be executed. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** D-Link DIR-809 devices with firmware through DIR-809Ax FW1.12WWB03 20190410 **Description** A stack buffer overflow issue exists in the `FUN 80040af8` function, located in the `/formWlanSetup` endpoint. This issue can be triggered via a crafted POST request, potentially allowing a remote attacker to execute arbitrary code in the system. **Recommendations** For D-Link DIR-809 devices with firmware through DIR-809Ax FW1.12WWB03 20190410, as a temporary workaround, consider disabling the `FUN 80040af8` function in the `/formWlanSetup` endpoint until a patch is available. Restrict access to the `/formWlanSetup` endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** D-Link DIR-809 devices with firmware through DIR-809Ax FW1.12WWB03 20190410 **Description** The issue is related to a stack buffer overflow vulnerability in the function `FUN 80046eb4` in the `/formSetPortTr` endpoint. This vulnerability can be triggered via a crafted POST request, potentially allowing a remote attacker to execute arbitrary code in the system. **Recommendations** For D-Link DIR-809 devices with firmware through DIR-809Ax FW1.12WWB03 20190410, consider disabling the `FUN 80046eb4` function in the `/formSetPortTr` endpoint as a temporary workaround until a patch is available. Restrict access to the `/formSetPortTr` endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** D-Link DIR-809 devices with firmware through DIR-809Ax FW1.12WWB03 20190410 **Description** A stack buffer overflow issue was found in the `sub 80046EB4` function in the `/formSetPortTr` endpoint. This issue can be triggered via a crafted POST request, potentially allowing a remote attacker to execute arbitrary code in the system. **Recommendations** For D-Link DIR-809 devices with firmware through DIR-809Ax FW1.12WWB03 20190410, consider disabling the `sub 80046EB4` function in the `/formSetPortTr` endpoint as a temporary workaround until a patch is available. Restrict access to the `/formSetPortTr` endpoint to minimize the risk of exploitation. Avoid using crafted POST requests to the `/formSetPortTr` endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.