Malacupa

**Name of the Vulnerable Software and Affected Versions** Axis Communications VAPIX API (affected versions not specified) **Description** Improper input validation in a VAPIX API parameter allows for remote code execution and potential privilege escalation. This issue requires authentication with a service account possessing administrator privileges to be exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** VAPIX Edge (affected versions not specified) **Description** The VAPIX Edge storage API contains a flaw that allows privilege escalation. An authenticated VAPIX administrator-privileged user can gain Linux Root privileges. Exploitation requires authentication with an administrator-privileged service account. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** AXIS OS (affected versions not specified) **Description** The VAPIX Device Configuration framework allowed a privilege escalation, enabling a lower-privileged user to gain administrator privileges. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ClickHouse versions prior to the latest supported version **Description** It is possible to crash or redirect the execution flow of the ClickHouse server process from an unauthenticated vector by sending a specially crafted request to the ClickHouse server native interface. This redirection is limited to what is available within a 256-byte range of memory at the time of execution, and no known remote code execution (RCE) code has been produced or exploited. **Recommendations** Fixes have been merged to all currently supported versions of ClickHouse. If you are maintaining your own forked version of ClickHouse or using an older version and cannot upgrade, the fix for this vulnerability can be found in the commit https://github.com/ClickHouse/ClickHouse/pull/64024. As a temporary workaround, consider restricting access to the ClickHouse server native interface until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** ClickHouse versions 23.3.18.15, 23.8.8.20, 23.9.6.20, 23.10.5.20 ClickHouse Cloud version 23.9.2.47551 **Description** A heap buffer overflow issue was discovered in the ClickHouse server, allowing an attacker to send a specially crafted payload to the native interface exposed by default on port 9000/tcp. This triggers a bug in the decompression logic of the Gorilla codec, causing the ClickHouse server process to crash. The attack does not require authentication. **Recommendations** For ClickHouse version 23.3.18.15, update to version 23.3.18.15 or later. For ClickHouse version 23.8.8.20, update to version 23.8.8.20 or later. For ClickHouse version 23.9.6.20, update to version 23.9.6.20 or later. For ClickHouse version 23.10.5.20, update to version 23.10.5.20 or later. For ClickHouse Cloud version 23.9.2.47551, no additional action is required as this version already includes the fix. As a temporary workaround, consider restricting access to the native interface on port 9000/tcp to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** ClickHouse (affected versions not specified) **Description** The issue is an integer underflow resulting in a crash due to a stack buffer overflow in the decompression of the FPC codec. It can be triggered and exploited by an unauthenticated attacker, causing the ClickHouse server process to crash. The vulnerability is similar to another issue in how the vulnerable function can be exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ClickHouse versions prior to 23.10.2.13-stable ClickHouse versions prior to 23.9.4.11-stable ClickHouse versions prior to 23.8.6.16-lts ClickHouse versions prior to 23.3.16.7-lts **Description** A heap buffer overflow issue was discovered in the ClickHouse server, allowing an attacker to send a specially crafted payload to the native interface exposed by default on port 9000/tcp. This triggers a bug in the decompression logic of the T64 codec, causing the ClickHouse server process to crash. The attack does not require authentication, but if triggered via HTTP protocol, a valid credential is needed as HTTP authentication takes place first. **Recommendations** For versions prior to 23.10.2.13-stable, update to version 23.10.2.13-stable or later. For versions prior to 23.9.4.11-stable, update to version 23.9.4.11-stable or later. For versions prior to 23.8.6.16-lts, update to version 23.8.6.16-lts or later. For versions prior to 23.3.16.7-lts, update to version 23.3.16.7-lts or later. As a temporary workaround, consider restricting access to the native interface on port 9000/tcp to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Microsoft SharePoint Server (affected versions not specified) Microsoft SharePoint Enterprise Server (affected versions not specified) Microsoft SharePoint Server Subscription Edition (affected versions not specified) **Description** The issue is related to errors in the user interface's information representation. It may allow a remote attacker to perform a spoofing attack. **Recommendations** For Microsoft SharePoint Server, consider restricting access to sensitive areas of the system until a fix is available. For Microsoft SharePoint Enterprise Server, restrict access to the user interface to minimize the risk of exploitation. For Microsoft SharePoint Server Subscription Edition, avoid using the system for critical operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.