Fouzhe

**Name of the Vulnerable Software and Affected Versions** libsoup (affected versions not specified) **Description** A Use-After-Free flaw exists in the libsoup library, specifically within the HTTP/2 server implementation. A remote attacker can exploit this by sending crafted HTTP/2 requests that trigger authentication failures. This can lead to the application attempting to access freed memory, potentially causing application instability, crashes, and a Denial of Service (DoS). The vulnerability affects applications relying on libsoup for handling HTTP requests. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: libsoup (affected versions not specified) Description: A flaw was found in the `soup multipart new from message()` function of the libsoup HTTP library. The issue occurs when the library processes specially crafted multipart messages, leading to improper validation and an internal calculation error, which can cause an integer underflow. This can result in the program accessing invalid memory and crashing, creating a denial-of-service risk. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: libsoup (affected versions not specified) Description: A flaw was found in the cookie parsing logic of the libsoup HTTP library, which is used in GNOME applications and other software. The issue arises when processing the expiration date of cookies, where a specially crafted value can trigger an integer overflow. This may result in undefined behavior, allowing an attacker to bypass cookie expiration logic, causing persistent or unintended cookie behavior. The problem stems from improper validation of large integer inputs during date arithmetic operations within the cookie parsing routines. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** mxml version 2.12 **Description** A use-after-free issue has been found in the mxmlWalkNext function in mxml-search.c, as demonstrated by mxmldoc. **Recommendations** For version 2.12, consider updating to a newer version that contains a fix for this issue, however at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Mini-XML version 2.12 **Description** A stack-based buffer overflow issue has been discovered. It occurs in the `mxml write node` function in `mxml-file.c` and can be triggered by vectors involving a double-precision floating point number and the '<order type="real">' substring. **Recommendations** For Mini-XML version 2.12, at the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** libIEC61850 version 1.3 **Description** A heap-based buffer overflow issue has been discovered in the BerEncoder encodeOctetString function, located in mms/asn1/ber encoder.c. This issue is exploitable and can be triggered with a different data sequence than a previously known attack vector. **Recommendations** For libIEC61850 version 1.3, consider restricting access to the `BerEncoder encodeOctetString` function in `ber encoder.c` until a patch is available. Avoid using the `BerEncoder encodeOctetString` function with potentially malicious input to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** libIEC61850 version 1.3 **Description** A NULL pointer dereference issue has been identified in the `Ethernet sendPacket` function located in the `ethernet bsd.c` file. **Recommendations** For libIEC61850 version 1.3, consider disabling the `Ethernet sendPacket` function as a temporary workaround until a patch is available.

**Name of the Vulnerable Software and Affected Versions** libIEC61850 version 1.3 **Description** A issue has been found in the software, which is a SEGV in the `Ethernet receivePacket` function located in the `ethernet bsd.c` file. **Recommendations** For libIEC61850 version 1.3, consider restricting access to the `Ethernet receivePacket` function in `ethernet bsd.c` to minimize the risk of exploitation until a patch is available.

**Name of the Vulnerable Software and Affected Versions** libIEC61850 version 1.3 **Description** A issue has been found in the software, which is a SEGV in `ControlObjectClient setCommandTerminationHandler` in `client/client control.c`. This issue is disputed by the software maintainer as it requires incorrect usage of the `client example control` program. **Recommendations** For libIEC61850 version 1.3, at the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** libIEC61850 version 1.3 **Description** A NULL pointer dereference issue has been identified in the `ClientDataSet getValues` function located in `client/ied connection.c`. **Recommendations** For libIEC61850 version 1.3, consider applying a patch or fix to resolve the NULL pointer dereference issue in the `ClientDataSet getValues` function.

**Name of the Vulnerable Software and Affected Versions** libIEC61850 version 1.3 **Description** A heap-based buffer overflow issue has been identified in the BerEncoder encodeOctetString function, located in the mms/asn1/ber encoder.c file. **Recommendations** For libIEC61850 version 1.3, consider restricting access to the BerEncoder encodeOctetString function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** PDF2JSON version 0.69 **Description** The issue is related to mismatched memory management routines in the XmlFontAccu::CSStyle function within XmlFonts.cc, specifically involving operator new [] versus operator delete. **Recommendations** For PDF2JSON version 0.69, consider applying a patch that corrects the mismatched memory management routines in the XmlFontAccu::CSStyle function to prevent potential memory leaks or crashes.

**Name of the Vulnerable Software and Affected Versions** jpeg encoder through 2015-11-27 **Description** The issue is related to a SEGV in the `readFromBMP` function in `jpeg encoder.cpp`, caused by an out-of-bounds write. **Recommendations** For versions through 2015-11-27, as a temporary workaround, consider disabling the `readFromBMP` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** jpeg encoder through 2015-11-27 **Description** A heap-based buffer overflow issue has been discovered in the `readFromBMP` function in `jpeg encoder.cpp`. **Recommendations** For versions through 2015-11-27, as a temporary workaround, consider disabling the `readFromBMP` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** PDF2JSON version 0.69 **Description** The issue is related to Mismatched Memory Management Routines, specifically the use of malloc versus operator delete in the HtmlString class within ImgOutputDev.cc. **Recommendations** For PDF2JSON version 0.69, update to a version where the memory management issue in the HtmlString class is resolved, or consider applying a patch that fixes the Mismatched Memory Management Routines if available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** dilawar sound through 2017-11-27 **Description** The issue is related to Mismatched Memory Management Routines, specifically the use of operator new [] versus operator delete in the end of openWavFile in wav-file.cc. **Recommendations** For dilawar sound through 2017-11-27, at the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** libwav versions prior to 2017-04-20 **Description** The issue is related to a SEGV in the `wav write` function located in libwav.c. **Recommendations** For versions prior to 2017-04-20, at the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** libwav through 2017-04-20 **Description** The issue is related to a SEGV in the `apply gain` function located in `wav gain/wav gain.c`. **Recommendations** For versions through 2017-04-20, consider restricting access to the `apply gain` function in `wav gain/wav gain.c` until a patch is available.

**Name of the Vulnerable Software and Affected Versions** libwav through 2017-04-20 **Description** The issue is related to an infinite loop in the `wav read` function in libwav.c. **Recommendations** For versions through 2017-04-20, consider disabling the `wav read` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** libwav through 2017-04-20 **Description** The issue is related to a SEGV in the `wav free` function in libwav.c. **Recommendations** For versions through 2017-04-20, at the moment, there is no information about a newer version that contains a fix for this issue.