Christian Rossow

**Name of the Vulnerable Software and Affected Versions** Thunderbird versions prior to 147.0.1 Thunderbird versions prior to 140.7.1 **Description** A flaw exists that could allow for CSS-based exfiltration of content from partially encrypted emails when remote content is permitted. This could potentially compromise the confidentiality of email communications. **Recommendations** Update Thunderbird to version 147.0.1 or later. Update Thunderbird to version 140.7.1 or later.

**Name of the Vulnerable Software and Affected Versions** Webmin versions prior to 2.202 Virtualmin versions prior to 7.20.2 **Description** The issue is related to a network traffic loop via spoofed UDP packets on port 10000, which can cause a denial of service. This problem is associated with an unreachable condition exit cycle. The vulnerability is being actively exploited and can allow a remote attacker to cause a denial of service. **Recommendations** For Webmin versions prior to 2.202, update to version 2.202 or later. For Virtualmin versions prior to 7.20.2, update to version 7.20.2 or later.

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.2 Description: The issue is related to the Linux kernel's handling of ACK packets in TCP connections. Specifically, the kernel would accept ACK packets with acknowledgment numbers that acknowledge data never sent by the server. This could potentially allow an attacker to exploit the vulnerability. The patch for this issue makes the ACK check more stringent, only accepting ACKs that are within a specific range. This refinement improves TCP security at a little cost. Recommendations: To resolve this issue, update the Linux kernel to version 4.2 or later. If updating is not possible, consider applying the patch manually or using a workaround provided by the Linux community. As a temporary workaround, consider disabling the affected TCP connections or restricting access to the vulnerable kernel until a patch is available.

**Name of the Vulnerable Software and Affected Versions** NTP versions prior to 4.2.7p26 **Description** The issue is related to the monlist feature in ntpd, which allows remote attackers to cause a denial of service (traffic amplification) via forged requests, specifically `REQ MON GETLIST` or `REQ MON GETLIST 1` requests. This vulnerability has been exploited in the wild. The problem is associated with insufficient control over the volume of transmitted network messages, enabling a remote attacker to send specially crafted requests and cause a denial of service. **Recommendations** For versions prior to 4.2.7p26, update to version 4.2.7p26 or later to resolve the issue. As a temporary workaround, consider disabling the monlist feature in ntpd to prevent exploitation until a patch is applied. Restrict access to the `REQ MON GETLIST` and `REQ MON GETLIST 1` requests to minimize the risk of denial of service attacks.