Asarubboo

**Name of the Vulnerable Software and Affected Versions** bzip3 versions prior to 1.3.0 **Description** An issue was discovered in libbzip3.a in bzip3. A denial of service (process hang) can occur with a crafted archive because bzip3 does not follow the required procedure for interacting with libsais. **Recommendations** For versions prior to 1.3.0, update to version 1.3.0 or later to resolve the issue. As a temporary workaround, consider avoiding the use of crafted archives that may cause the process hang until a patch is available.

**Name of the Vulnerable Software and Affected Versions** bzip3 versions prior to 1.2.3 **Description** An issue was discovered in libbzip3.a. There is an out-of-bounds write in the `bz3 decode block` function. **Recommendations** For versions prior to 1.2.3, update to version 1.2.3 or later to resolve the issue. As a temporary workaround, consider restricting the use of the `bz3 decode block` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** bzip3 versions prior to 1.2.3 **Description** An issue was discovered in libbzip3.a. There is a crash caused by an invalid memmove in `bz3 decode block`. **Recommendations** For versions prior to 1.2.3, update to version 1.2.3 or later to resolve the issue. As a temporary workaround, consider restricting the use of the `bz3 decode block` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** bzip3 versions prior to 1.2.3 **Description** An issue was discovered in libbzip3.a. There is a bz3 decode block out-of-bounds read. **Recommendations** For versions prior to 1.2.3, update to version 1.2.3 or later to resolve the issue. As a temporary workaround, consider restricting the use of the `bz3 decode block` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** bzip3 versions prior to 1.2.3 **Description** An issue was discovered in libbzip3.a. There is an xwrite out-of-bounds read. **Recommendations** For versions prior to 1.2.3, update to version 1.2.3 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** bzip3 version 1.2.2 **Description** An issue was discovered in libbzip3.a where there is a `bz3 decompress` out-of-bounds read in certain situations. This occurs when buffers passed to bzip3 do not contain enough space to be filled with decompressed data. The vendor's perspective is that the observed behavior can only occur for a contract violation. **Recommendations** For bzip3 version 1.2.2, consider implementing checks to ensure that buffers passed to bzip3 have enough space to be filled with decompressed data to prevent out-of-bounds reads. As a temporary workaround, consider adding error handling for situations where the decompressed data exceeds the buffer size.

**Name of the Vulnerable Software and Affected Versions** bzip3 versions prior to 1.3.0 **Description** An issue was discovered in libbzip3.a in bzip3. A `bz3 decode block` out-of-bounds write can occur with a crafted archive because bzip3 does not follow the required procedure for interacting with `libsais`. **Recommendations** For versions prior to 1.3.0, update to version 1.3.0 or later to resolve the issue. As a temporary workaround, consider avoiding the use of crafted archives until a patch is available.

**Nome do software vulnerável e versões afetadas** Versões do drachtio-server anteriores à 0.8.20 **Descrição** Uma falha no drachtio-server permite que invasores remotos provoquem uma negação de serviço, resultando na falha do daemon. Isso é feito através do envio de uma mensagem longa em uma solicitação TCP, o que leva a um erro std::length error. **Recomendações** Para versões anteriores à 0.8.20, atualize para a versão 0.8.20 ou posterior para resolver o problema. Como solução temporária, considere restringir o comprimento das mensagens nas solicitações TCP para evitar a falha do daemon.

**Nome do software vulnerável e versões afetadas** Versões do drachtio-server anteriores à 0.8.20 **Descrição** Uma falha no fork libsofia-sip permite que invasores remotos provoquem uma negação de serviço por meio de uma mensagem UDP maliciosa, levando à falha do daemon devido a uma falha na auto-assertão do arquivo libsofia-sip-ua/tport/tport.c. A função config sortlist também não possui verificações de validade da string de entrada, o que pode permitir um estouro de pilha de comprimento arbitrário. **Recomendações** Para versões anteriores à 0.8.20, atualize para a versão 0.8.20 ou posterior para resolver o problema. Como solução temporária, considere restringir o acesso ao módulo vulnerável libsofia-sip-ua/tport/tport.c para minimizar o risco de exploração. Evite usar mensagens UDP manipuladas que possam levar a uma negação de serviço até que o problema seja resolvido.

**Nome do software vulnerável e versões afetadas** Versões do drachtio-server anteriores à 0.8.19 **Descrição** Uma falha no fork libsofia-sip permite que invasores remotos provoquem uma negação de serviço por meio de uma mensagem UDP maliciosa, resultando em uma leitura excessiva do buffer baseada na pilha devido a um erro de deslocamento de um. Isso pode causar a falha do daemon. **Recomendações** Para versões anteriores à 0.8.19, atualize para a versão 0.8.19 ou posterior para resolver o problema. Como solução temporária, considere restringir o acesso ao endpoint UDP para minimizar o risco de exploração.

**Nome do software vulnerável e versões afetadas** drachtio-server versão 0.8.18 **Descrição** O problema diz respeito às permissões do diretório /var/log/drachtio e do arquivo drachtio.log. Especificamente, o diretório possui um modo de 0777 e o arquivo de log possui um modo de 0666. Isso poderia permitir o acesso não autorizado ou a modificação dos arquivos de log. **Recomendações** Para a versão 0.8.18 do drachtio-server, considere alterar as permissões do diretório /var/log/drachtio e do arquivo drachtio.log para configurações mais restritivas, a fim de minimizar o risco de acesso não autorizado.

**Name of the Vulnerable Software and Affected Versions** lrzip version 0.631 **Description** The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, via a crafted archive. This is due to a problem in the bufRead::get() function in libzpaq/libzpaq.h in liblrzip.so. **Recommendations** For lrzip version 0.631, consider updating to a newer version that contains a fix for this issue, as the current version is affected.

**Name of the Vulnerable Software and Affected Versions** Telegram Desktop version 0.10.19 **Description** The issue allows local users to obtain sensitive authentication information via standard filesystem operations due to the use of 0755 permissions for the $HOME/.TelegramDesktop directory. **Recommendations** For Telegram Desktop version 0.10.19, consider changing the permissions of the $HOME/.TelegramDesktop directory to more restrictive settings to prevent unauthorized access.

The ReadPCXImage function in coders/pcx.c in ImageMagick 7.0.4.9 allows remote attackers to cause a denial of service (attempted large memory allocation and application crash) via a crafted file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8862 and CVE-2016-8866.

**Name of the Vulnerable Software and Affected Versions** Audio File Library (aka audiofile) version 0.3.6 **Description** The issue allows remote attackers to cause a denial of service (crash) via a crafted file. This is due to the `decodeSample` function in `IMA.cpp`. **Recommendations** For Audio File Library (aka audiofile) version 0.3.6, consider disabling the `decodeSample` function in `IMA.cpp` as a temporary workaround until a patch is available.

**Name of the Vulnerable Software and Affected Versions** ImageMagick version 7.0.3.0 **Description** The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds read and crash, via a crafted file. This is related to the `IsPixelMonochrome` function in `MagickCore/pixel-accessor.h`. The vendor has stated that this issue is specific to Q64, which they do not support. **Recommendations** For ImageMagick version 7.0.3.0, consider avoiding the use of the `IsPixelMonochrome` function until a fix is available. As a temporary workaround, restrict the processing of crafted files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** ImageMagick versions 7.0.3.3 through 7.0.3.7 **Description** The issue is related to the `AcquireMagickMemory` function in `MagickCore/memory.c`, which allows remote attackers to have an unspecified impact through a crafted image. This triggers a memory allocation failure. The problem exists due to an incomplete fix. **Recommendations** For ImageMagick versions 7.0.3.3 through 7.0.3.7, update to version 7.0.3.8 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** ImageMagick versions prior to 7.0.3-1 **Description** The issue is related to the AcquireQuantumPixels function in MagickCore/quantum.c, which can be exploited by remote attackers using a crafted image file. This exploitation can trigger a memory allocation failure, potentially leading to unspecified impact. **Recommendations** For versions prior to 7.0.3-1, update to version 7.0.3-1 or later to resolve the issue. As a temporary workaround, consider restricting the use of the AcquireQuantumPixels function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** ImageMagick versions prior to 7.0.3.3 **Description** The issue is related to the AcquireMagickMemory function in MagickCore/memory.c, which allows remote attackers to have an unspecified impact via a crafted image. This is triggered by a memory allocation failure. **Recommendations** For versions prior to 7.0.3.3, update to version 7.0.3.3 or later to resolve the issue.