Ilya Smith

Name of the Vulnerable Software and Affected Versions: GNU Libc (affected versions not specified) Description: The issue is related to a mitigation bypass in the nptl component, allowing an attacker to bypass stack guard protection. This can be exploited by using a stack buffer overflow vulnerability to bypass the stack guard. It is noted that upstream comments treat this as a non-security bug with no real threat. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** GNU Libc (affected versions not specified) **Description** The issue is related to the libld component of the GNU Libc library, which provides system calls and basic functions. It is associated with insufficient input validation, allowing a remote attacker to execute arbitrary code using a specially crafted ELF file. The attack vector involves sending two ELF files to the victim and asking them to run ldd on it, which executes code. Note that upstream comments indicate this is being treated as a non-security bug and no real threat. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Dahua IP camera products versions prior to V2.400.0000.14.R.20170713 Dahua IP camera products versions prior to DH IPC-Consumer-Zi-Themis Eng P V2.408.0000.11.R.20170621 **Description** The issue is related to a stack buffer overflow in the Sonia web interface of Dahua IP camera products. The `sonia` application, located at `/usr/bin/sonia`, provides the web interface and other services for controlling the IP camera remotely. It does not validate input data length for the `password` field, allowing a remote, unauthenticated attacker to submit a crafted POST request to the IP camera's Sonia web interface. This may lead to out-of-bounds memory operations, loss of availability, or remote code execution. **Recommendations** For versions prior to V2.400.0000.14.R.20170713, update the firmware to a version that includes the patched Sonia web interface. For versions prior to DH IPC-Consumer-Zi-Themis Eng P V2.408.0000.11.R.20170621, update the firmware to a version that includes the patched Sonia web interface. As a temporary workaround, consider restricting access to the `sonia` application until a patch is available. Avoid using the `password` field in the affected API endpoint until the issue is resolved.