Seth Arnold

The issue is triggered by a DDoS attack on tcp port 22, causing a kernel crash. This problem arises from the backport of a commit related to `nft lookup` without including subsequent fixes.

The issue arises when kernel headers need to be extracted, and bcc attempts to load them from a temporary directory. An unprivileged attacker could exploit this to force bcc to load compromised Linux headers. However, Linux distributions that provide kernel headers by default are not affected by default.

The issue allows an unprivileged attacker to force bcc to load compromised Linux headers if kernel headers need to be extracted and are not provided by default. This can occur because bpftrace attempts to load the headers from a temporary directory. Linux distributions that provide kernel headers by default are not affected.

The issue is related to insufficient access control in the AccountsService of the Ubuntu operating system. It may allow an attacker to cause a denial of service. The problem is that accountsservice no longer drops permissions when writing .pam environment.

The issue is related to an incomplete fix for a previously identified problem, leading to a potential security concern.

The issue arises from a race condition between `chown` and `chmod` operations during a container filesystem shift. This could allow an attacker to change the mode of any file on the system, rather than the expected path, by creating a symbolic link in a specific window. The `doUidshiftIntoContainer()` function has an unsafe `Chmod()` call that races against the stat in the `Filepath.Walk()` function.

The issue allows local users to write to arbitrary files via a symlink attack on /tmp/thermald.pid, potentially leading to unauthorized data modification. This is due to a flaw in the main function in android main.cpp.

Name of the Vulnerable Software and Affected Versions: spice-vdagent versions up to and including 0.17.0 Description: The issue allows a local attacker with access to the session the agent runs in to inject arbitrary commands to be executed, due to the spice-vdagent not properly escaping the save directory before passing it to the shell. Recommendations: For spice-vdagent versions up to and including 0.17.0, update to a version later than 0.17.0 to resolve the issue.

The issue allows remote attackers to obtain access to USB connected printers via a direct request, as IPPUSBXD listens on all interfaces.

The issue concerns a failure to verify the server hostname against the domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate. This allows attackers to spoof SSL servers by using any valid certificate, potentially leading to man-in-the-middle attacks.

The issue is related to the newusers tool in the shadow utility, which can be manipulated with malformed input, leading to crashes or unspecified behaviors due to buffer overflow or memory corruption. This can cross a privilege boundary, particularly in web-hosting environments where an unprivileged user can create subaccounts through a Control Panel. The exploitation of this issue may allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.

The issue allows remote attackers to obtain sensitive information or poison the cache via a request from certain browsers, due to the improper inclusion of the `Vary: Cookie` or `Cache-Control` header in responses.

The issue concerns multiple vulnerabilities in the OpenJPEG package, which can be exploited remotely. This exploitation may lead to a breach of confidentiality, integrity, and availability of protected information. Technical details include a stack-based buffer overflow in OpenJPEG before version 1.5.2, allowing remote attackers to have an unspecified impact via unknown vectors to files such as `lib/openjp3d/opj jp3d compress.c`, `bin/jp3d/convert.c`, or `lib/openjp3d/event.c`.