Cturt

**Name of the Vulnerable Software and Affected Versions** Dino versions 0.1.2 and earlier Dino versions 0.2.x before 0.2.1 **Description** The issue is related to an error with URI-encoded path separators, allowing for Directory Traversal, but only for the creation of new files. This could potentially allow a remote attacker to impact data integrity. **Recommendations** For Dino versions 0.1.2 and earlier, update to version 0.1.2 or later. For Dino versions 0.2.x before 0.2.1, update to version 0.2.1 or later. As a temporary workaround, consider restricting the use of URI-encoded path separators until a patch is available.

**Name of the Vulnerable Software and Affected Versions** FreeBSD versions 10.1 through 10.1 p33 FreeBSD versions 10.2 through 10.2 p16 FreeBSD versions 10.3 through 10.3 p2 **Description** The issue is caused by an integer signedness error in the `sockargs` function, which can lead to a heap-based buffer overflow. This can allow local users to cause a denial of service, such as a memory overwrite and kernel panic, or potentially gain privileges. The vulnerability is triggered by a negative `buflen` argument. **Recommendations** For FreeBSD version 10.1, update to version 10.1 p34 or later. For FreeBSD version 10.2, update to version 10.2 p17 or later. For FreeBSD version 10.3, update to version 10.3 p3 or later.

**Name of the Vulnerable Software and Affected Versions** FreeBSD versions 9.3 before p42 FreeBSD versions 10.1 before p34 FreeBSD versions 10.2 before p17 FreeBSD versions 10.3 before p3 **Description** The issue is caused by an integer signedness error in the `genkbd commonioctl` function, located in `sys/dev/kbd/kbd.c`, which can lead to a buffer overflow. This allows a local attacker to obtain sensitive information from kernel memory, cause a denial of service, or gain privileges. The vulnerability is triggered by a negative value in the `flen` structure member in the `arg` argument in a SETFKEY ioctl call. **Recommendations** For FreeBSD version 9.3, update to p42 or later. For FreeBSD version 10.1, update to p34 or later. For FreeBSD version 10.2, update to p17 or later. For FreeBSD version 10.3, update to p3 or later.