Alexander Peslyak

**Nome do Software Vulnerável e Versões Afetadas** Linux kernel versões anteriores a 7.0.8 Linux kernel versões anteriores a 6.18.31 Linux kernel versões anteriores a 6.12.89 Linux kernel versões anteriores a 6.6.139 Linux kernel versões anteriores a 6.1.173 Linux kernel versões anteriores a 5.15.207 Linux kernel versões anteriores a 5.10.256 **Description** Um problema de gerenciamento inadequado de privilégios existe no mecanismo ptrace do kernel Linux, especificamente nas funções `get dumpable()` e ` ptrace may access()`. A falha decorre de um erro de lógica onde o sistema lida incorretamente com a capacidade de despejo (dumpability) de tarefas que não possuem um ponteiro de gerenciamento de memória (mm) associado, como threads do kernel. Isso permite que um usuário local não privilegiado ignore os limites de privilégios e acesse descritores de arquivo de outros processos. Em certos cenários, isso pode ser explorado por meio de uma condição de corrida durante o encerramento do processo para roubar descritores de arquivo privilegiados, levando à escalada de privilégios para root local e à divulgação de credenciais sensíveis, incluindo chaves privadas SSH e hashes de senha do `/etc/shadow`. A exploração bem-sucedida pode exigir que o módulo Reliable Datagram Sockets (RDS) esteja carregado, que o `io ring` esteja habilitado e a presença de um binário SUID-root legível em sistemas x86 64. **Recommendations** Atualize o kernel Linux para a versão 7.0.8 ou superior. Atualize o kernel Linux para a versão 6.18.31 ou superior. Atualize o kernel Linux para a versão 6.12.89 ou superior. Atualize o kernel Linux para a versão 6.6.139 ou superior. Atualize o kernel Linux para a versão 6.1.173 ou superior. Atualize o kernel Linux para a versão 5.15.207 ou superior. Atualize o kernel Linux para a versão 5.10.256 ou superior.

**Name of the Vulnerable Software and Affected Versions** LibVNCServer versions prior to 0.9.12 **Description** The issue is related to insufficient sanitization of VNC packet input data in the `rfbProcessClientNormalMessage()` function of the LibVNCServer library. This can be exploited by a remote attacker to cause a denial of service and gain unauthorized access to sensitive data. The vulnerability is triggered by specially crafted VNC packets, which can lead to access to uninitialized and potentially sensitive data, or possibly other impacts such as an integer overflow. **Recommendations** For LibVNCServer versions prior to 0.9.12, update to version 0.9.12 or later to resolve the issue. As a temporary workaround, consider restricting access to the `rfbProcessClientNormalMessage()` function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** cron versions 3.0pl1-128 through 3.0pl1-128ubuntu2 **Description** The issue is related to the cron package, where the postinst maintainer script allows for group-crontab-to-root privilege escalation via symlink attacks against unsafe usage of the `chown` and `chmod` programs. This can be exploited by an attacker to gain elevated privileges. **Recommendations** For cron versions 3.0pl1-128 through 3.0pl1-128ubuntu2, consider disabling the postinst maintainer script as a temporary workaround to minimize the risk of exploitation. Restrict access to the `chown` and `chmod` programs to prevent unsafe usage. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** minicom versions prior to 2.7.1 **Description** A buffer overflow flaw was found in the way minicom handled VT100 escape sequences. A malicious terminal device could potentially use this flaw to crash minicom, or execute arbitrary code in the context of the minicom process. **Recommendations** For minicom versions prior to 2.7.1, update to version 2.7.1 or later to resolve the issue. As a temporary workaround, consider restricting access to minicom to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 2.6.19 **Description** A use-after-free issue in the xacct add tsk function allows local users to potentially obtain sensitive information from kernel memory or cause a denial of service, resulting in a system crash, by utilizing a taskstats TASKSTATS CMD ATTR PID command. **Recommendations** For versions prior to 2.6.19, update to version 2.6.19 or later to resolve the issue.