Carnil

The issue resides in the `XML ExternalEntityParserCreate` function. It does not properly copy user data for unknown encoding handlers, potentially leading to memory corruption. Reports indicate a critical impact on Linux distributions and applications, with the possibility of Remote Code Execution (RCE). The issue is described as an XML External Entity (XXE) flaw.

An integer overflow exists in the zisofs block pointer allocation logic on 32-bit systems. A remote attacker can exploit this by providing a specially crafted ISO9660 image, potentially leading to a heap buffer overflow and arbitrary code execution.

A flaw has been identified in the libarchive library, specifically within the `archive read format rar seek data()` function, involving an integer overflow that can lead to a double-free condition. This can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.

A flaw in the libarchive library can lead to a heap buffer over-read due to the size of a filter block potentially exceeding the Lempel-Ziv-Storer-Schieber (LZSS) window. This can cause the library to attempt to read beyond the allocated memory buffer, resulting in unpredictable program behavior, crashes (denial of service), or the disclosure of sensitive information from adjacent memory regions.

A flaw has been identified in the libarchive library involving an 'off-by-one' miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write overflow, potentially corrupting adjacent memory and causing unpredictable program behavior, crashes, or could be used as a building block for more sophisticated exploitation.

A flaw exists in the libarchive library that occurs when file streams are piped into bsdtar. This leads to an out-of-bounds read, which is a condition where the program reads data past the end of the intended buffer. This can result in memory corruption, unpredictable program behavior, or a denial-of-service condition.

The issue allows SQL injection in the template function in host templates.php via the `graph template` parameter. This problem exists due to an incomplete fix for a previous issue.

The issue concerns the Crypt::Random::Source package for Perl, which has a fallback to the built-in `rand()` function. This function is not a secure source of random bits, potentially leading to security issues.

The issue is related to a buffer overflow vulnerability when a ZIP archive has an empty-name file and mac-ext is enabled. This occurs in the `slurp central directory` function in `archive read support format zip.c`. The vulnerability can be exploited by a remote attacker to cause a denial of service using a specially crafted archive.

A flaw has been identified in the libarchive library involving an integer overflow. This issue can be triggered when processing a Web Archive (WARC) file that claims to have more than INT64 MAX - 4 content bytes. An attacker could craft a malicious WARC archive to induce this overflow, potentially leading to unpredictable program behavior, memory corruption, or a denial-of-service condition within applications that process such archives using libarchive.

The issue is related to the improper handling of XML external entity (XXE) declarations by the `XML ExternalEntityParserCreate` function, allowing an XML Entity Expansion attack. This can be exploited by a remote attacker to obtain sensitive information or cause a denial of service by sending specially crafted XML content. The estimated number of potentially affected devices is not specified.

The issue is related to memory leak errors in the ruby-magick interface between Ruby and the ImageMagick library. This can lead to a denial of service (DOS) by memory exhaustion, potentially allowing a remote attacker to cause a service disruption.

The issue allows for XSS in the hostinfo plugin due to printing a response from Net::XWhois without proper checks.

The issue allows any process on the system to read traffic from keyboards, including sensitive data, due to a udev rule that makes supported device nodes world-readable and writable. This affects a LED configuration tool for Logitech Gx10 keyboards.

The issue is related to insufficient restrictions in the D-Bus policy, allowing any user to inspect and manipulate properties. This can lead to access-control bypass in certain situations where an unrelated D-Bus system service has a settable property. The vulnerability can be exploited by a remote attacker to access confidential data and compromise its integrity.

A flaw was found in ImageMagick in MagickCore/visual-effects.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.

A flaw was found in ImageMagick in MagickCore/resize.c, related to the lack of a check for division by zero. This issue could allow an attacker to trigger undefined behavior in the form of math division by zero by submitting a crafted file that is processed by ImageMagick. The highest threat from this issue is to system availability. An attacker could exploit this flaw to cause a denial of service using a specially crafted file.

A flaw was found in ImageMagick in coders/jp2.c, related to the absence of a check for division by zero. This issue could allow an attacker to trigger undefined behavior in the form of math division by zero by submitting a crafted file that is processed by ImageMagick. The highest threat from this issue is to system availability.

The issue allows redirect header injection.

The issue is related to weak permissions for the /etc/target directory, as well as the backup directory and backup files. This weakness can be exploited to gain access to confidential data.