Erik Sjölund

**Name of the Vulnerable Software and Affected Versions** Podman, Buildah, and CRI-O (affected versions not specified) **Description** A symlink traversal vulnerability in the containers/storage library can cause Podman, Buildah, and CRI-O to hang and result in a denial of service via OOM kill when running a malicious image using an automatically assigned user namespace (`--userns=auto` in Podman and Buildah). The containers/storage library will read /etc/passwd inside the container, but does not properly validate if that file is a symlink, which can be used to cause the library to read an arbitrary file on the host. This issue can be exploited by a remote attacker to cause a denial of service using a specially crafted symbolic link to an arbitrary file on the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Kubernetes versions 1.1 through 1.12 Kubernetes versions prior to 1.13.11 Kubernetes versions prior to 1.14.7 Kubernetes versions prior to 1.15.4 **Description** The issue is related to the Kubernetes kubectl cp command, which allows an attacker to place a malicious file outside of the destination directory using a combination of symlinks provided by tar output of a malicious container. This could enable an attacker to upload a nefarious file using a symlink, outside of the destination tree. The vulnerability is associated with incorrect link resolution before accessing a file, which may allow a remote attacker to upload a malicious file. **Recommendations** For versions 1.1 through 1.12, update to a version prior to 1.13.11, 1.14.7, or 1.15.4 to resolve the issue. For versions prior to 1.13.11, update to version 1.13.11 or later. For versions prior to 1.14.7, update to version 1.14.7 or later. For versions prior to 1.15.4, update to version 1.15.4 or later. As a temporary workaround, consider restricting the use of the kubectl cp command until a patch is available.

Name of the Vulnerable Software and Affected Versions: abc2ps versions prior to 1.3.3 Description: The issue concerns multiple buffer overflows in the abc2ps package, which can be exploited to execute arbitrary code via crafted ABC music files. This can lead to a breach of confidentiality, integrity, and availability of protected information. The exploitation can be carried out remotely. Recommendations: For versions prior to 1.3.3, update to version 1.3.3 or later to resolve the issue. As a temporary workaround, consider restricting the use of crafted ABC music files until a patch is available. Avoid using the abc2ps package with untrusted input files until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** abuse-SDL versions prior to 2.00 **Description** The issue is related to multiple buffer overflows that can be triggered via the command line, allowing local users to execute arbitrary code. **Recommendations** For versions prior to 2.00, update to version 2.00 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** KDE versions 3.3 through 3.3.2 **Description** The issue concerns multiple vulnerabilities in fliccd, a component of the kdeedu Kstars support for Instrument Neutral Distributed Interface (INDI) in KDE. These vulnerabilities can be exploited by local users and remote attackers to execute arbitrary code via stack-based buffer overflows. **Recommendations** For KDE versions 3.3 through 3.3.2, consider updating to a version that is not affected by these vulnerabilities. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Synaesthesia versions 2.1 and earlier **Description** The issue allows local users to read arbitrary files due to the software not dropping privileges before processing configuration and mixer files when installed setuid root. **Recommendations** For Synaesthesia versions 2.1 and earlier, consider dropping privileges before processing configuration and mixer files to prevent unauthorized access. As a temporary workaround, restrict the use of setuid root installation until a proper fix is applied.

**Name of the Vulnerable Software and Affected Versions** hztty versions 2.0 and earlier **Description** A local user can execute arbitrary commands due to an unknown issue in the software. **Recommendations** For versions 2.0 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** sympa version 3.3.3 **Description** The issue is related to a buffer overflow in the queue.c file of a support script for sympa. This can allow local users to execute arbitrary code when the script is run with setuid privileges. Additionally, there are multiple vulnerabilities in the wwsympa package that can lead to breaches of confidentiality, integrity, and availability of protected information, potentially exploitable by local attackers. **Recommendations** For sympa version 3.3.3, consider restricting the execution of the support script or removing setuid privileges as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** zhcon versions prior to 0.2 **Description** The issue allows local users to read arbitrary files due to the software not dropping privileges before reading a user configuration file. This can lead to a breach of confidentiality of protected information. The exploitation of this issue can be carried out by a local attacker. **Recommendations** For versions prior to 0.2, update to version 0.2 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive files that could be read through this issue until the update is applied.

**Name of the Vulnerable Software and Affected Versions** gatos version 0.0.4 and earlier **Description** A buffer overflow issue exists in the exported display function in xatitv, allowing local users to execute arbitrary code. **Recommendations** For gatos versions prior to 0.0.5, update to version 0.0.5 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** playmidi versions prior to 2.4 **Description** The issue concerns multiple vulnerabilities in the playmidi package of the Debian GNU/Linux operating system, which can be exploited by a local attacker to compromise the confidentiality, integrity, and availability of protected information. A buffer overflow in playmidi allows local users to execute arbitrary code. **Recommendations** For versions prior to 2.4, update to version 2.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the playmidi package to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** abcmidi versions 20050101 and earlier **Description** The issue concerns multiple buffer overflows in the abcmidi-yaps translator, which can be exploited remotely. This can lead to the execution of arbitrary code via crafted ABC music files that trigger the overflows during translation into PostScript, potentially disrupting the confidentiality, integrity, and availability of protected information. **Recommendations** For abcmidi version 20050101 and earlier, update to a version that contains a fix for this issue to prevent remote attackers from executing arbitrary code. As a temporary workaround, consider restricting the use of the abcmidi-yaps translator until a patch is available. Avoid using the abcmidi package with untrusted ABC music files until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** xpcd versions 2.08 **Description** The issue affects the xpcd package in Debian GNU/Linux, allowing a local attacker to exploit multiple vulnerabilities, potentially leading to breaches in confidentiality, integrity, and availability of protected information. A buffer overflow in pcdsvgaview in xpcd 2.08 enables local users to execute arbitrary code. **Recommendations** For xpcd version 2.08, update to a version that fixes the buffer overflow in pcdsvgaview to prevent local users from executing arbitrary code. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** XView library version 3.2 olvwm (affected versions not specified) xviewg-dev (affected versions not specified) olwm (affected versions not specified) xviewg (affected versions not specified) **Description** The issue involves multiple buffer overflows in the XView library, which may allow local users to execute arbitrary code via setuid applications that use the library. Additionally, there are multiple vulnerabilities in the olvwm, xviewg-dev, olwm, and xviewg packages of the Debian GNU/Linux operating system, which can lead to violations of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited by a local attacker. **Recommendations** For XView library version 3.2, update to a newer version that contains a fix for this issue. For olvwm, consider disabling the package until a patch is available. For xviewg-dev, restrict access to the package to minimize the risk of exploitation. For olwm, avoid using the package in sensitive environments until the issue is resolved. For xviewg, consider applying configuration changes to mitigate the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability in olvwm, xviewg-dev, olwm, and xviewg.