Michael Bommarito

Apache Traffic Server contains memory-safety errors that allow the system to write out of bounds or overflow integers during the parsing of MIME and HTTP headers.

A malicious LDAP server can cause the Thunderbird LDAP client to crash due to memory exhaustion. This occurs when the client is configured to query the server for address-book autocomplete, allowing the server to stash arbitrarily large amounts of attacker-supplied data into the client.

An attacker can inject arbitrary styled content, phishing links, and CSS to manipulate the chat UI by sending HTML chat messages via Matrix or XMPP.

A crash in the Catapult DCT2000 protocol dissector allows a denial of service. A protocol dissector is a software component that breaks down network traffic into a human-readable format.