Yi Ren

The issue is related to a buffer overflow in the Core component of Oracle VM VirtualBox, which can be exploited to cause a denial of service. A high-privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes can compromise Oracle VM VirtualBox, resulting in the ability to cause a hang or frequently repeatable crash.

The issue is related to insufficient input validation in the Server: Optimizer component of Oracle MySQL Server. It allows a high-privileged attacker with network access via multiple protocols to compromise the MySQL Server. Successful attacks can result in the unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of the MySQL Server.

The issue is related to insufficient input validation in the MySQL Server product, specifically in the Server: DML component. This allows a high-privileged attacker with network access via multiple protocols to compromise the MySQL Server. Successful attacks can result in the takeover of the MySQL Server or cause a hang or frequently repeatable crash (complete DOS) of the server.

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.7.31 and prior MySQL Server versions 8.0.21 and prior Description: The issue is related to insufficient input validation in the MySQL Server product, allowing a high-privileged attacker with network access via multiple protocols to compromise the server. Successful attacks can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of the MySQL Server. Recommendations: For MySQL Server versions 5.7.31 and prior, update to a version later than 5.7.31 to resolve the issue. For MySQL Server versions 8.0.21 and prior, update to a version later than 8.0.21 to resolve the issue. As a temporary workaround, consider restricting network access to the MySQL Server to minimize the risk of exploitation.

The issue is related to an out-of-bounds access in the PCI configuration space and a buffer overflow in the ati mm read function. This could allow an attacker to cause a denial of service.

The issue is related to the ati-vga component in the QEMU hardware emulator, which is vulnerable to uncontrolled recursion. This can be triggered by a crafted mm index value during an ati mm read or ati mm write call, potentially allowing an attacker to cause a denial of service.

The issue is related to the fib6 rule lookup function in the Linux kernel, which mishandles the RT6 LOOKUP F DST NOREF flag in a reference-count decision. This can lead to a crash, as identified by syzkaller. The vulnerability is also associated with errors in handling exceptional states, which can be exploited to cause a denial of service.