Jubalh

**Name of the Vulnerable Software and Affected Versions** sslh (affected versions not specified) **Description** A critical issue has been found in the function `hexdump` of the file `probe.c` of the component Packet Dumping Handler. The manipulation of the argument `msg info` leads to a format string issue. The attack may be initiated remotely. **Recommendations** To fix this issue, it is recommended to apply a patch. Specifically, the patch with the name `b19f8a6046b080e4c2e28354a58556bb26040c6f` should be applied. As a temporary workaround, consider disabling the `hexdump` function until a patch is available. Restrict access to the vulnerable `probe.c` file to minimize the risk of exploitation. Avoid using the argument `msg info` in the affected component until the issue is resolved.

Name of the Vulnerable Software and Affected Versions: abcm2ps versions 8.13.20 Description: The issue is related to Incorrect Access Control, allowing attackers to cause a denial of service attack via a crafted file. The component affected is front.c, specifically the function `txt add`. Recommendations: For abcm2ps version 8.13.20, update to a version after commit 08aef597656d065e86075f3d53fda89765845eae to resolve the issue. As a temporary workaround, consider restricting access to the `txt add` function in the front.c component until a patch is available.