Lc

A double free issue in Winsock allows an authorized attacker to elevate privileges locally. A double free occurs when the program attempts to free the same memory location twice, which can lead to memory corruption.

The issue allows a high-privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker and can result in unauthorized read access to a subset of MySQL Cluster accessible data and unauthorized ability to cause a partial denial of service of MySQL Cluster.

The issue is related to insufficient input validation in the Cluster: General component of Oracle MySQL Cluster, allowing a high-privileged attacker with access to the physical communication segment to compromise the MySQL Cluster. Successful attacks require human interaction from a person other than the attacker and can result in the takeover of MySQL Cluster.

The issue is related to a buffer overflow in the Cluster: General component of Oracle MySQL Cluster, allowing a high-privileged attacker with access to the physical communication segment to compromise the MySQL Cluster. Successful attacks require human interaction from a person other than the attacker and can result in the takeover of the MySQL Cluster.

Name of the Vulnerable Software and Affected Versions: DokuWiki versions prior to 2017-02-19e Description: The issue arises from the improper encoding of user input in the `call` parameter of the "/lib/exe/ajax.php" API endpoint. This leads to a reflected file download issue, allowing remote attackers to execute arbitrary programs. Recommendations: For versions prior to 2017-02-19e, update to a version that properly encodes user input in the `call` parameter of the "/lib/exe/ajax.php" endpoint to prevent reflected file download attacks. As a temporary workaround, consider restricting access to the "/lib/exe/ajax.php" endpoint until a patch is available.