Ratul Gupta

The issue is related to a Denial of Service via an infinite loop when parsing XML documents.

The issue allows man-in-the-middle attackers to spoof servers by not verifying X.509 certificates from SSL servers.

The issue concerns the pam userdb module for Pam, which uses a case-insensitive method to compare hashed passwords. This comparison method makes it easier for attackers to guess the password via a brute force attack.

The issue allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation with the keyboard focus on the Activities search field in the `js/ui/screenShield.js` file.

The issue allows remote attackers to execute arbitrary code via a crafted request. This is possible because the Storable module is used, and the request is not properly handled when it is deserialized.

The issue concerns the default configuration of MongoDB, where objects are not validated. This allows remote authenticated users to cause a denial of service or read system memory by sending a crafted BSON object in the column name of an insert command. This action triggers a buffer over-read.

The issue allows remote attackers to cause a denial of service, specifically an incorrect block of IP addresses, via crafted login names. This is due to an incorrect regular expression used when analyzing authentication logs. The vulnerability can be exploited remotely, potentially leading to disruption of protected information.

The issue is related to multiple vulnerabilities in the Net-SNMP package, which can lead to a denial of service (crash or infinite loop, CPU consumption, and hang) when AgentX is registering to handle a MIB and processing GETNEXT requests. The vulnerabilities can be exploited remotely, potentially disrupting the availability of protected information.

The issue allows remote attackers to bypass intended cryptographic protection mechanisms by leveraging a subkey with all bits cleared in a key flags subpacket, which is treated as if all bits are set. This might lead to a violation of the integrity and availability of protected information. The exploitation of this issue can be done remotely.