Alexey Vishnyakov

**Name of the Vulnerable Software and Affected Versions** WavPack versions 5.3.0 through 5.3.2 **Description** The issue is related to an out-of-bounds write in the `WavpackPackSamples` function in the `pack utils.c` file due to an integer overflow in a `malloc` argument. This can allow a remote attacker to compromise data integrity and cause a denial of service. **Recommendations** For WavPack versions 5.3.0 through 5.3.2, consider disabling the `WavpackPackSamples` function as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Suricata versions prior to 4.1.2 Description: The issue allows an attacker to evade signature detection by sending a specially formed network packet, potentially bypassing DNS detection. This is achieved through a Denial of Service attack. The components affected are app-layer-detect-proto.c, decode.c, decode-teredo.c, and decode-ipv6.c. An attacker can trigger this issue by sending a specifically crafted network request. Recommendations: For Suricata versions prior to 4.1.2, update to version 4.1.2 to resolve the issue. As a temporary workaround, consider restricting access to the affected components until the update can be applied.

Name of the Vulnerable Software and Affected Versions: Suricata versions prior to 4.1.3 Description: The issue allows an attacker to bypass signature detection using a specially formed sequence of network packets, potentially evading detection. This can be triggered by an attacker through a specifically crafted network TCP session. Recommendations: For versions prior to 4.1.3, update to version 4.1.3 to resolve the issue. As a temporary workaround, consider restricting access to detect.c component until the update is applied.