Meh Chang

**Nome do software vulnerável e versões afetadas** Versões do Exim anteriores à 4.94.2 **Descrição** O problema está relacionado a uma inicialização incorreta que pode levar ao esgotamento da pilha por recursão ou a outras consequências. Isso ocorre porque o uso de certas funções `getc` é mal administrado quando um cliente utiliza `BDAT` em vez de `DATA`. A vulnerabilidade pode ser explorada por um invasor remoto para executar um ataque de negação de serviço (DoS) enviando dados especialmente criados para o aplicativo. **Recomendações** Para versões do Exim anteriores à 4.94.2, atualize para a versão 4.94.2 ou posterior para resolver o problema. Como solução temporária, considere restringir o uso de comandos `BDAT` para minimizar o risco de exploração.

**Name of the Vulnerable Software and Affected Versions** PAN-OS versions 7.1.18 and earlier PAN-OS versions 8.0.11-h1 and earlier PAN-OS versions 8.1.2 and earlier **Description** The issue exists due to insufficient input validation in the GlobalProtect portal and GlobalProtect Gateway interface of the PAN-OS operating system. Exploitation of this issue may allow an unauthenticated remote attacker to execute arbitrary code by sending a specially crafted request. Mass scanning activity has been detected, checking for vulnerable Palo Alto SSL VPN servers. Successful exploitation allows an unauthenticated attacker to execute arbitrary code. **Recommendations** For PAN-OS versions 7.1.18 and earlier, update to a version later than 7.1.18. For PAN-OS versions 8.0.11-h1 and earlier, update to a version later than 8.0.11-h1. For PAN-OS versions 8.1.2 and earlier, update to a version later than 8.1.2. As a temporary workaround, consider disabling the GlobalProtect Portal or GlobalProtect Gateway Interface until a patch is available. Restrict access to the GlobalProtect portal and GlobalProtect Gateway interface to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Pulse Secure Pulse Connect Secure (PCS) versions 8.1R15.0 and earlier Pulse Secure Pulse Connect Secure (PCS) versions 8.2R12.0 and earlier Pulse Secure Pulse Connect Secure (PCS) versions 8.3R7.0 and earlier Pulse Secure Pulse Connect Secure (PCS) versions 9.0R3.3 and earlier **Description** The issue allows an authenticated attacker, via the admin web interface, to exploit Directory Traversal and execute arbitrary code on the appliance. **Recommendations** For versions 8.1R15.0 and earlier, update to version 8.1R15.1 or later. For versions 8.2R12.0 and earlier, update to version 8.2R12.1 or later. For versions 8.3R7.0 and earlier, update to version 8.3R7.1 or later. For versions 9.0R3.3 and earlier, update to version 9.0R3.4 or later.

**Name of the Vulnerable Software and Affected Versions** Pulse Secure Pulse Connect Secure (PCS) versions 8.2 through 8.2R12.1 Pulse Secure Pulse Connect Secure (PCS) versions 8.3 through 8.3R7.1 Pulse Secure Pulse Connect Secure (PCS) versions 9.0 through 9.0R3.4 **Description** The issue is related to errors in permission handling, allowing an unauthenticated remote attacker to send a specially crafted URI and perform an arbitrary file reading. This can lead to the disclosure of active users and their plain-text credentials. Over 2,500 Pulse Secure VPN endpoints are potentially affected. **Recommendations** For Pulse Secure Pulse Connect Secure (PCS) versions 8.2 through 8.2R12.1, update to version 8.2R12.1 or later. For Pulse Secure Pulse Connect Secure (PCS) versions 8.3 through 8.3R7.1, update to version 8.3R7.1 or later. For Pulse Secure Pulse Connect Secure (PCS) versions 9.0 through 9.0R3.4, update to version 9.0R3.4 or later. As a temporary workaround, consider restricting access to the vulnerable URI endpoint until a patch is available.