Alexey Dobriyan

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified) Description: The issue is related to an integer overflow in BLKSECDISCARD, which can cause a near infinite loop inside `blkdev issue secure erase()`. This occurs when a specific `ioctl` call is made with a large value, such as `uint64 t r[2] = {512, 18446744073709551104ULL};` and `ioctl(fd, BLKSECDISCARD, r);`. The problem leads to an attempt to access beyond the end of a device. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The ELF loader in the Linux kernel uses the `randomize va space` sysctl twice, which can change at any moment, potentially leading to unpredictable consequences if two loads see different values. The issue has been resolved by ensuring exactly one load for a consistent value across one exec. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to the version containing the fix for the module `e shstrndx`.sh size=0 OOB access issue **Description** A vulnerability in the Linux kernel has been identified, allowing out-of-bounds (OOB) access. This issue can be triggered by crafting a module to exploit the vulnerability in the line `if (info->secstrings[strhdr->sh size - 1] != '0')`. The vulnerability can cause a page fault, leading to a system crash. Technical details about the issue include the `load module` function and the `e shstrndx` module. **Recommendations** For Linux kernel versions prior to the fixed version, consider applying the rebased patch onto modules-next to resolve the issue. As a temporary workaround, restrict the loading of custom modules to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 3.11.1 **Description** The issue concerns the IPv6 SCTP implementation in the Linux kernel, which fails to trigger an intended configuration of IPsec encryption. This allows remote attackers to obtain sensitive information by sniffing the network. **Recommendations** For versions prior to 3.11.1, update to version 3.11.1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** OpenTTD versions prior to 0.4.0.1 **Description** The issue is related to multiple buffer overflows that can cause a denial of service, potentially leading to a crash, and may also allow for the execution of arbitrary code through unspecified vectors. **Recommendations** For versions prior to 0.4.0.1, update to version 0.4.0.1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** OpenTTD versions prior to 0.4.0.1 **Description** The issue concerns multiple format string vulnerabilities that can be exploited by remote attackers to cause a denial of service, potentially leading to a crash, and may also allow the execution of arbitrary code. The exact vectors used for the exploitation are not specified. **Recommendations** For versions prior to 0.4.0.1, update to version 0.4.0.1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 2.6.27-rc2 linux-headers-2.6.24-etchnhalf.1-r5k-ip32 (affected versions not specified) linux-headers-2.6.24-etchnhalf.1-all-mips (affected versions not specified) linux-headers-2.6.24-etchnhalf.1-r4k-ip22 (affected versions not specified) linux-image-2.6.24-etchnhalf.1-r5k-ip32 (affected versions not specified) linux-image-2.6.24-etchnhalf.1-r4k-ip22 (affected versions not specified) **Description** The issue is caused by an off-by-one error in the iov iter advance function in mm/filemap.c in the Linux kernel. This can lead to a denial of service (system crash) via a certain sequence of file I/O operations with readv and writev. Additionally, multiple vulnerabilities in Debian GNU/Linux packages may allow remote exploitation, leading to a breach of confidentiality, integrity, and availability of protected information. **Recommendations** For Linux kernel versions prior to 2.6.27-rc2: Update to version 2.6.27-rc2 or later to resolve the issue. For linux-headers-2.6.24-etchnhalf.1-r5k-ip32, linux-headers-2.6.24-etchnhalf.1-all-mips, linux-headers-2.6.24-etchnhalf.1-r4k-ip22, linux-image-2.6.24-etchnhalf.1-r5k-ip32, and linux-image-2.6.24-etchnhalf.1-r4k-ip22: At the moment, there is no information about a newer version that contains a fix for this vulnerability.