Bien Pham

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to the commit 3e91b0ebd994635df2346353322ac51ce84ce6d8 **Description** A use-after-free vulnerability in the Linux kernel's netfilter: nf tables component can be exploited to achieve local privilege escalation. Due to a race condition between nf tables netlink control plane transaction and nft set element garbage collection, it is possible to underflow the reference counter causing a use-after-free vulnerability. **Recommendations** Upgrade past commit 3e91b0ebd994635df2346353322ac51ce84ce6d8 to resolve the issue. As a temporary workaround, consider restricting access to the nf tables component to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Oracle VM VirtualBox versions prior to 6.1.44 Oracle VM VirtualBox versions prior to 7.0.8 **Description** The issue is related to a buffer overflow vulnerability in the Core component of Oracle VM VirtualBox, allowing a low-privileged attacker with logon access to the infrastructure to compromise Oracle VM VirtualBox. Successful attacks can result in the takeover of Oracle VM VirtualBox. The vulnerability may also impact additional products due to scope change. **Recommendations** For Oracle VM VirtualBox versions prior to 6.1.44, update to version 6.1.44 or later. For Oracle VM VirtualBox versions prior to 7.0.8, update to version 7.0.8 or later.

**Name of the Vulnerable Software and Affected Versions** Oracle VM VirtualBox versions prior to 6.1.44 Oracle VM VirtualBox versions prior to 7.0.8 **Description** The issue is related to an out-of-bounds read in the Oracle VM VirtualBox product, which can allow a high-privileged attacker with logon to the infrastructure to compromise Oracle VM VirtualBox. Successful attacks can result in unauthorized read access to a subset of Oracle VM VirtualBox accessible data. The vulnerability may significantly impact additional products. **Recommendations** For versions prior to 6.1.44, update to version 6.1.44 or later. For versions prior to 7.0.8, update to version 7.0.8 or later.

**Name of the Vulnerable Software and Affected Versions** Windows CD-ROM File System Driver (affected versions not specified) **Description** The issue is related to an integer overflow in the Windows CD-ROM File System Driver. This allows a remote attacker to execute arbitrary code by using a specially crafted ISO file. The vulnerability can be exploited to affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cisco Small Business RV160, RV160W, RV260, RV260P, RV260W, RV340, RV340W, RV345, RV345P (affected versions not specified) **Description** The issue is related to weaknesses in the authentication procedure of the web interface of the affected routers. This could allow a remote attacker to gain partial administrative privileges and perform unauthorized actions. The vulnerability may also enable an attacker to execute arbitrary code, elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS). **Recommendations** For Cisco Small Business RV160, RV160W, RV260, RV260P, RV260W, RV340, RV340W, RV345, RV345P, consider disabling the web interface until a patch is available. Restrict access to the `upload.cgi` endpoint to minimize the risk of exploitation. Avoid using the `sessionid` variable in the affected API endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** TP-Link AC1750 version 1.1.4 Build 20211022 rel.59103(5553) **Description** The issue is related to a read past the end of an allocated buffer in the NetUSB.ko module, which can be exploited by network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC1750 routers. The flaw exists due to the lack of proper validation of user-supplied data. An attacker can leverage this vulnerability to execute code in the context of the root user. No information is provided about the estimated number of potentially affected devices or real-world incidents. **Recommendations** For TP-Link AC1750 version 1.1.4 Build 20211022 rel.59103(5553), consider disabling the NetUSB.ko module as a temporary workaround until a patch is available. Restrict access to the vulnerable module to minimize the risk of exploitation. Avoid using the vulnerable NetUSB.ko module until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.