Gabriel Quadros

**Name of the Vulnerable Software and Affected Versions** RedisBloom versions prior to 2.2.19 RedisBloom versions prior to 2.4.12 RedisBloom versions prior to 2.6.14 RedisBloom versions prior to 2.8.2 **Description** There is an integer overflow vulnerability in RedisBloom, a module used in Redis. This vulnerability allows an attacker, who is a Redis client with knowledge of the password, to allocate memory in the heap that is lesser than the required memory due to wraparound. As a result, read and write operations can be performed beyond the allocated memory, leading to information leaks and out-of-bounds writes. The integer overflow is located in the `CMS.INITBYDIM` command, which initializes a Count-Min Sketch to dimensions specified by the user. It accepts two values, `width` and `depth`, and uses them to allocate memory in `NewCMSketch()`. **Recommendations** For versions prior to 2.2.19, update to version 2.2.19 or later. For versions prior to 2.4.12, update to version 2.4.12 or later. For versions prior to 2.6.14, update to version 2.6.14 or later. For versions prior to 2.8.2, update to version 2.8.2 or later. As a temporary workaround, consider restricting access to the `CMS.INITBYDIM` command until a patch is available. Avoid using the `width` and `depth` parameters in the `CMS.INITBYDIM` command to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Zoom client for Linux versions prior to 2.0.115900.1201 **Description** The issue is related to a stack-based buffer overflow in the ZoomLauncher binary, which can be exploited by remote attackers to execute arbitrary code. This is achieved by leveraging the `zoommtg://` scheme handler. **Recommendations** For versions prior to 2.0.115900.1201, update to version 2.0.115900.1201 or later to resolve the issue. As a temporary workaround, consider restricting the use of the `zoommtg://` scheme handler until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Zoom client for Linux versions prior to 2.0.115900.1201 **Description** The issue concerns the ZoomLauncher binary in the Zoom client for Linux, which does not properly sanitize user input when constructing a shell command. This allows remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler. **Recommendations** For versions prior to 2.0.115900.1201, update to version 2.0.115900.1201 or later to resolve the issue. As a temporary workaround, consider restricting the use of the zoommtg:// scheme handler until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** Ruby on Rails versions prior to 2.3.15 Ruby on Rails versions 3.0.x through 3.0.14 Ruby on Rails versions 3.1.x through 3.1.6 Ruby on Rails versions 3.2.x through 3.2.6 **Description** The Active Record component in Ruby on Rails does not properly implement the passing of request data to a where method in an ActiveRecord class. This allows remote attackers to conduct certain SQL injection attacks via nested query parameters that leverage improper handling of nested hashes. **Recommendations** For Ruby on Rails versions prior to 2.3.15, update to version 2.3.15 or later. For Ruby on Rails versions 3.0.x through 3.0.14, update to version 3.0.14 or later. For Ruby on Rails versions 3.1.x through 3.1.6, update to version 3.1.6 or later. For Ruby on Rails versions 3.2.x through 3.2.6, update to version 3.2.6 or later.