Ben Hutchings

**Name of the Vulnerable Software and Affected Versions** Buildroot versions prior to 0b2967e Buildroot version 2024.02.2 and later are not affected, but all versions before 0b2967e are vulnerable. Since 2024.02.2 is the fixed version, we list all versions prior to 0b2967e as vulnerable. **Description** The issue is related to the lack of the sticky bit for the /dev/shm directory in Buildroot before version 0b2967e. A fix was released in version 2024.02.2. **Recommendations** For Buildroot versions prior to 0b2967e, update to version 2024.02.2 or later to resolve the issue. As a temporary workaround, consider setting the sticky bit for the /dev/shm directory manually until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** klibc versions prior to 2.0.9 **Description** The issue is related to the `malloc()` function in the klibc library, which may result in an integer overflow and a subsequent heap buffer overflow. This could allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service. **Recommendations** For versions prior to 2.0.9, update to version 2.0.9 or later to resolve the issue. As a temporary workaround, consider restricting the use of the `malloc()` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** klibc versions prior to 2.0.9 **Description** An issue in the cpio command on 32-bit systems may result in a buffer overflow or other security impact due to multiple possible integer overflows. This could allow a remote attacker to access confidential data, compromise data integrity, and cause a denial of service. **Recommendations** For versions prior to 2.0.9, update to version 2.0.9 or later to resolve the issue. As a temporary workaround, consider restricting the use of the cpio command on 32-bit systems until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** klibc versions prior to 2.0.9 **Description** An issue in the `calloc()` function may result in an integer overflow and a subsequent heap buffer overflow. This could allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service. **Recommendations** For versions prior to 2.0.9, update to version 2.0.9 or later to resolve the issue. As a temporary workaround, consider restricting the use of the `calloc()` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** klibc versions prior to 2.0.9 **Description** An issue in the cpio command of the klibc library on 64-bit systems is related to an integer overflow, which may result in a NULL pointer dereference. This issue can be exploited by a remote attacker to cause a denial of service. **Recommendations** For versions prior to 2.0.9, update to version 2.0.9 or later to resolve the issue. As a temporary workaround, consider restricting the use of the cpio command until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Leptonica versions prior to 1.75.3 **Description** The issue is related to the gplotRead and ptaReadStream functions in the Leptonica library, which does not limit the number of characters in a %s format argument to fscanf or sscanf. This allows remote attackers to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a long string. **Recommendations** For versions prior to 1.75.3, update to version 1.75.3 or later to resolve the issue. As a temporary workaround, consider restricting the input to the gplotRead and ptaReadStream functions to prevent the use of long strings that could cause a stack-based buffer overflow.

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions through 4.14.8 **Description** The issue allows local users to cause a denial of service, potentially resulting in memory corruption, or possibly have other unspecified impacts. This is achieved by leveraging register truncation mishandling in the kernel/bpf/verifier.c component of the Linux kernel. **Recommendations** For Linux kernel versions through 4.14.8, update to a version that contains a fix for this issue to prevent potential memory corruption and denial of service.

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions through 4.10.1 **Description** The issue allows local users to cause a denial of service, specifically an invalid unlock and double free, via a multithreaded application. This is due to the improper restriction of association peel-off operations during certain wait states in net/sctp/socket.c. **Recommendations** For Linux kernel versions through 4.10.1, update to a version that includes the correct fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions 3.x and 4.x **Description** The issue is related to multiple race conditions in the Advanced Union Filesystem (aufs) patches for the Linux kernel, specifically in the mm/madvise.c and mm/msync.c components. This can be exploited by local users to cause a denial of service, such as use-after-free and BUG, or possibly gain privileges via system calls like `madvise` or `msync`. The problem arises from concurrent execution with shared resources and improper synchronization. **Recommendations** For Linux kernel versions 3.x and 4.x, consider disabling the `madvise` and `msync` system calls as a temporary workaround until a patch is available. Restrict access to the affected components mm/madvise.c and mm/msync.c to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 2.6.39.1 **Description** The issue is related to the ldm frag add function in fs/partitions/ldm.c, which does not properly handle memory allocation for non-initial fragments. This might allow local users to conduct buffer overflow attacks and gain privileges or obtain sensitive information via a crafted LDM partition table. The vulnerability exists because of an incomplete fix for a previous issue. Multiple vulnerabilities in the kernel-kdumppae package of the SUSE Linux Enterprise operating system can be exploited remotely, leading to a disruption of protected information availability. **Recommendations** For Linux kernel versions prior to 2.6.39.1, update to version 2.6.39.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the ldm frag add function in fs/partitions/ldm.c to minimize the risk of exploitation. Avoid using crafted LDM partition tables until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 3.2.30 openSUSE kernel-ec2-extra (affected versions not specified) openSUSE kernel-ec2-extra-debuginfo (affected versions not specified) **Description** The issue allows remote attackers to cause a denial of service, potentially leading to a network-controller outage. This can be triggered via crafted TCP packets that exploit a small MSS value. Multiple vulnerabilities in the openSUSE kernel-ec2-extra and kernel-ec2-extra-debuginfo packages can also lead to disruption of protected information, with exploitation possible remotely. **Recommendations** For Linux kernel versions prior to 3.2.30, update to version 3.2.30 or later to resolve the issue. For openSUSE kernel-ec2-extra, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For openSUSE kernel-ec2-extra-debuginfo, at the moment, there is no information about a newer version that contains a fix for this vulnerability.