Highdyemanov

An issue exists during the deserialization of a slice packet where the `xdr datum()` function fails to validate that a cstring length conforms to the slice descriptor bounds. This allows a cstring longer than the allocated buffer to overflow it. An unauthenticated attacker can exploit this by sending a crafted packet to the server, potentially causing a crash or other security impact.

The `xdr status vector()` function fails to handle the `isc arg cstring` type during the decoding of an 'op response' packet. This allows an unauthenticated attacker to cause a server crash by sending a specially crafted 'op response' packet to the server.

The `sdl desc()` function fails to validate the length of a decoded SDL descriptor from a slice packet. A zero-length descriptor can be used to calculate the number of slice items, leading to a division by zero. An unauthenticated attacker can trigger a server crash by sending a specially crafted slice packet.