Dragana Damjanovic

**Name of the Vulnerable Software and Affected Versions** Windows (affected versions not specified) **Description** The issue is related to insufficient input validation in the HTTP.sys driver of the Windows operating system. This can be exploited by a remote attacker to cause a denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 66 **Description** The issue is related to memory safety bugs, including evidence of memory corruption, which could potentially be exploited to run arbitrary code. It is also described as a buffer overflow vulnerability in memory, allowing a remote attacker to access confidential data, compromise its integrity, and cause a denial of service. **Recommendations** For versions prior to 66, update to version 66 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive data and minimizing browser usage until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 55 Firefox ESR versions prior to 52.3 Thunderbird versions prior to 52.3 **Description** Memory safety bugs were reported, showing evidence of memory corruption. It is presumed that with enough effort, some of these bugs could be exploited to run arbitrary code. **Recommendations** For Firefox versions prior to 55, update to version 55 or later. For Firefox ESR versions prior to 52.3, update to version 52.3 or later. For Thunderbird versions prior to 52.3, update to version 52.3 or later.

**Name of the Vulnerable Software and Affected Versions** OpenVPN versions 2.0.0 through 2.0.10 OpenVPN versions 2.1.x OpenVPN versions 2.2.0 through 2.2.2 OpenVPN versions 2.3.x before 2.3.6 **Description** The issue allows remote authenticated users to cause a denial of service, resulting in a server crash, by sending a small control channel packet. This can lead to disruption of protected information availability. The exploitation can be carried out remotely by an attacker who has passed the authentication procedure. **Recommendations** For OpenVPN versions 2.0.0 through 2.0.10, update to version 2.0.11 or later. For OpenVPN versions 2.1.x, update to version 2.2.3 or later. For OpenVPN versions 2.2.0 through 2.2.2, update to version 2.2.3 or later. For OpenVPN versions 2.3.x before 2.3.6, update to version 2.3.6 or later.