Asim Viladi Oglu Manizada

**Name of the Vulnerable Software and Affected Versions** MySQL Router versions 8.4.0 through 8.4.9 MySQL Router versions 9.0.0 through 9.7.0 **Description** An issue in the General component of MySQL Router allows an unauthenticated attacker with network access via TLS to compromise the system. Successful exploitation can lead to a hang or a frequently repeatable crash, resulting in a complete Denial of Service (DOS), which is a condition where the service becomes unavailable to its intended users. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Samba (affected versions not specified) **Description** A flaw exists in the handling of NTFS-style reparse points on shares configured with `read only = yes`. Due to missing SMB-layer access checks, authenticated users who possess underlying filesystem write permissions can create or delete reparse point metadata through SMB operations, even on read-only exports. This allows for the modification of SMB-visible file behavior, such as converting files into symbolic links or other reparse point types. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** dnsmasq (affected versions not specified) **Description** A heap-based out-of-bounds write in the DHCPv6 implementation allows local attackers to execute arbitrary code with root privileges by sending a crafted DHCPv6 packet. A heap-based out-of-bounds write occurs when a program writes data past the end of a memory buffer allocated on the heap, which can lead to memory corruption. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** udisks (affected versions not specified) **Description** A flaw exists in the udisks storage management daemon that permits unprivileged users to back up LUKS encryption headers without proper authorization. This is due to a privileged D-Bus method, responsible for exporting encryption metadata, lacking a policy check. Consequently, sensitive cryptographic metadata can be read and written to locations controlled by an attacker, potentially compromising the confidentiality of encrypted storage volumes. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Squid versions prior to 7.5 **Description** A heap Use-After-Free issue exists when handling Internet Cache Protocol (ICP) traffic. This allows a remote attacker to perform a reliable and repeatable Denial of Service attack, making the service unavailable. The issue is limited to deployments where ICP support is explicitly enabled by configuring a non-zero `icp port`. This cannot be mitigated by using `icp access` rules. Use-After-Free is a condition where a program continues to use a pointer after it has been freed, which can lead to crashes or memory corruption. **Recommendations** Update to version 7.5. As a temporary workaround, disable ICP support by setting the `icp port` to zero.