Marian Rehak

A heap-buffer-overflow vulnerability was found in LibTIFF, specifically in the `extractImageSection()` function at `tools/tiffcrop.c:7916` and `tools/tiffcrop.c:7801`. This flaw allows attackers to cause a denial of service via a crafted tiff file. The vulnerability is related to buffer copying without input size checking, which can be exploited by a remote attacker to cause a denial of service.

A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to arbitrary IP addresses. The vulnerability is related to insufficient authentication of data.

A segmentation fault flaw was found in the Advancecomp package, which may lead to decreased availability.

The issue is related to a heap-based buffer overflow in the ImageMagick package, which can cause the application to crash. This can be exploited by an attacker to disrupt service.

The issue is related to a heap-buffer overflow in the `valid parameter transform` function of the bash package, which can lead to memory problems. This can potentially allow a remote attacker to execute arbitrary code.

A flaw was found in WildFly, allowing an attacker to see deployment names, endpoints, and any other data the trace payload may contain.

A flaw was found that grants excessive permissions when giving granular permission related to the organization, allowing a user to view and manage other organizations. This poses a significant threat to data confidentiality.

A flaw was found in the Linux kernel's implementation of IO-URING, allowing an attacker with local executable permission to create a string of requests that can cause a use-after-free flaw within the kernel. This issue leads to memory corruption and possible privilege escalation. The flaw is related to the use of memory after it has been freed.

A use-after-free flaw was found in the Linux kernel in log replay in fs/ntfs3/fslog.c in the NTFS journal. This flaw allows a local attacker to crash the system and leads to a kernel information leak problem, potentially allowing an attacker to access confidential data and cause a denial of service.

The issue allows attackers to trigger a crash and achieve unlocked access to a Wayland compositor.

A POST based reflected Cross Site Scripting vulnerability has been identified in Keycloak. The issue exists due to inadequate protection of the web page structure, allowing a remote attacker to execute arbitrary code. The vulnerability can be exploited via a reflected XSS attack.

A flaw was found in python-oslo-utils due to improper parsing. Passwords with a double quote (") in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext.

The issue is related to a stack overflow flaw in the Linux kernel's TIPC protocol functionality. This flaw allows a remote user to crash the system or possibly escalate their privileges if they have access to the TIPC network. The vulnerability is caused by a lack of validation of the number of domain member nodes, which can lead to a buffer overflow. The vulnerability can be exploited by sending a specially crafted network packet with a high number of domain member nodes. The issue affects systems with the TIPC module loaded and the TIPC bearer enabled, which is typically used in clusters and not enabled by default in non-specialized Linux distributions.

The issue is related to the smb2 ioctl query info function in the Linux kernel's Common Internet File System (CIFS), specifically due to an incorrect return from the memdup user function. This flaw allows a local, privileged attacker to crash the system, resulting in a denial of service. The estimated number of potentially affected devices is not provided. There is no information about real-world incidents where this issue was exploited.

Name of the Vulnerable Software and Affected Versions: kiali-operator versions prior to 1.33.0 kiali-operator versions prior to 1.24.7 Description: An incorrect access control flaw was found in the kiali-operator. This flaw allows an attacker with a basic level of access to the cluster to deploy a given image to anywhere in the cluster, potentially gaining access to privileged service account tokens. The highest threat from this flaw is to data confidentiality and integrity as well as system availability. Recommendations: For versions prior to 1.33.0, update to version 1.33.0 or later. For versions prior to 1.24.7, update to version 1.24.7 or later. As a temporary workaround, consider restricting access to the cluster to minimize the risk of exploitation.

A flaw in ImageMagick is caused by the improper use of open functions, leading to a denial of service. This issue allows an attacker to crash the system.

A flaw in ovirt-engine allows an authenticated user to read other users' personal information, including name, email, and public SSH key. This issue is related to information disclosure.

A flaw was found in the code base where usages of ObjectInputStream are without type checks. This allows an attacker to inject arbitrarily serialized Java Objects, which would then get deserialized in a privileged context and potentially lead to remote code execution.

The issue is related to a buffer overflow in the Direct IO function of the Linux kernel, which can be exploited to gain unauthorized access to protected information or cause a denial of service. This flaw can lead to the NFS client crashing and, in some cases, cause a kernel panic after a memory allocation by kmalloc. The primary threats posed by this issue are to data confidentiality and system availability.

The issue is related to an out-of-bounds heap buffer access in the ARM Generic Interrupt Controller emulator of QEMU. This occurs because the interrupt ID written to the controller memory area is not masked to be 4 bits wide, potentially leading to issues when updating controller state fields and their subsequent processing. A privileged guest user may exploit this to crash the QEMU process on the host, resulting in a denial-of-service scenario.