Ao Wang

The `ptrace(PT SC REMOTE)` function failed to properly validate parameters for the `syscall(2)` and ` syscall(2)` meta-system calls. This allows a user with debugging capabilities to trigger arbitrary code execution in the kernel, regardless of the target process's privileges. An unprivileged local user can exploit this to escalate privileges and potentially gain full control of the system.

An easily exploitable issue exists in the Kernel component of Oracle Solaris that allows an unauthenticated attacker with network access via TCP to compromise the system. Successful attacks can result in unauthorized read access to a subset of Oracle Solaris data.

A difficult to exploit issue exists in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). An unauthenticated attacker with access to the physical communication segment attached to the hardware where Oracle VM VirtualBox executes can compromise the software. Successful attacks can result in a takeover of Oracle VM VirtualBox.

The pf(4) packet filter in FreeBSD incorrectly validates TCP sequence numbers, which could allow a malicious actor to execute a denial-of-service attack against hosts behind the firewall. This issue is related to improper access control in the packet filter component.

An elevation of privilege issue in libzipfile could allow a local malicious application to execute arbitrary code within the context of a privileged process, potentially leading to a local permanent device compromise. This compromise may require reflashing the operating system to repair the device.