Asim Viladi Oglu Manizada

**Name of the Vulnerable Software and Affected Versions** Samba (affected versions not specified) **Description** A flaw exists in the handling of NTFS-style reparse points on shares configured with `read only = yes`. Due to missing SMB-layer access checks, authenticated users who possess underlying filesystem write permissions can create or delete reparse point metadata through SMB operations, even on read-only exports. This allows for the modification of SMB-visible file behavior, such as converting files into symbolic links or other reparse point types. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** dnsmasq (affected versions not specified) **Description** A heap-based out-of-bounds write in the DHCPv6 implementation allows local attackers to execute arbitrary code with root privileges by sending a crafted DHCPv6 packet. A heap-based out-of-bounds write occurs when a program writes data past the end of a memory buffer allocated on the heap, which can lead to memory corruption. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** udisks (affected versions not specified) **Description** A flaw exists in the udisks storage management daemon that permits unprivileged users to back up LUKS encryption headers without proper authorization. This is due to a privileged D-Bus method, responsible for exporting encryption metadata, lacking a policy check. Consequently, sensitive cryptographic metadata can be read and written to locations controlled by an attacker, potentially compromising the confidentiality of encrypted storage volumes. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Squid versions prior to 7.5 **Description** Squid, a caching proxy for the Web, contains a heap Use-After-Free issue that can lead to Denial of Service when handling ICP traffic. This allows a remote attacker to perform a reliable and repeatable Denial of Service attack against the Squid service using the ICP protocol. The attack is limited to deployments that explicitly enable ICP support by configuring a non-zero `icp port`. Denying ICP queries using `icp access` rules does not mitigate this issue. **Recommendations** Update to version 7.5 or later.