Owais Lone

A relative path traversal issue exists in Windows libarchive. This flaw allows an unauthorized attacker to perform tampering over a network. Path traversal is a technique where an attacker uses special characters or sequences to access files or directories outside the intended folder.

A relative path traversal issue allows an unauthorized remote attacker to execute arbitrary code over a network, potentially compromising the affected system.

A heap-based buffer overflow allows an unauthorized remote attacker to execute arbitrary code over a network and affect the system. A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer than it can hold, potentially overwriting adjacent memory.

A crafted message in the low-level build API allows an attacker to remove the contents of the `/tmp` directory. This occurs because an action intended to delete files within the build container rootfs can escape and affect the actual host temporary directory.

A path traversal issue exists in the remote-import API. Users possessing a join token or a trusted cluster mTLS certificate, such as enrolled cluster members, can manipulate files within an imported remote cluster inside the `/var/snap/microceph` confinement. This flaw can lead to daemon disruption and pollution of the cluster state.