Ash1852

**Name of the Vulnerable Software and Affected Versions** open-mpi hwloc version 2.1.0 **Description** An issue was discovered in open-mpi hwloc that allows attackers to cause a denial of service or other unspecified impacts via `glibc-cpuset` in `topology-linux.c`. **Recommendations** For open-mpi hwloc version 2.1.0, consider disabling the `glibc-cpuset` functionality in `topology-linux.c` as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** GNS3 dynamips version 0.2.21 **Description** The issue is related to the use of an uninitialized variable in the function `gen eth recv` in GNS3 dynamips. This could potentially lead to unpredictable behavior or errors. **Recommendations** For GNS3 dynamips version 0.2.21, consider disabling the `gen eth recv` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Nome do software vulnerável e versões afetadas** Simple DirectMedia Layer versão 1.2 **Descrição** O problema está relacionado a uma vulnerabilidade do tipo “use-after-free” na função XFree do componente /src/video/x11/SDL x11yuv.c da biblioteca Simple DirectMedia Layer. Essa vulnerabilidade pode ser explorada por um invasor remoto para causar uma negação de serviço. **Recomendações** Para a Simple DirectMedia Layer versão 1.2, considere desativar a função XFree como uma solução temporária até que um patch esteja disponível. Restrinja o acesso ao componente /src/video/x11/SDL x11yuv.c para minimizar o risco de exploração. No momento, não há informações sobre uma versão mais recente que contenha uma correção para esta vulnerabilidade.

**Name of the Vulnerable Software and Affected Versions** xiph opusfile versions 0.9 through 0.12 **Description** A null pointer dereference issue was discovered in functions `op get data` and `op open1` in opusfile.c. This issue may allow attackers to cause a denial of service or other unspecified impacts. The vulnerability is related to the `opusfile` library, a stream decoder for the opus format. **Recommendations** For versions 0.9 through 0.12, consider disabling the `op get data` and `op open1` functions in opusfile.c as a temporary workaround to minimize the risk of exploitation. Restrict access to the vulnerable opusfile.c module to prevent potential attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.