Orange_8361

Name of the Vulnerable Software and Affected Versions: Microsoft Excel versions (affected versions not specified) Microsoft 365 Apps for Enterprise versions (affected versions not specified) Microsoft Office versions (affected versions not specified) Microsoft Office Long Term Servicing Channel versions (affected versions not specified) Microsoft Office Online Server versions (affected versions not specified) Description: The issue is related to a lack of data sanitization at the management level in Microsoft Office packages, including Microsoft Excel. Exploitation of this issue may allow an attacker to execute arbitrary code using a specially crafted malicious file. Recommendations: For Microsoft Excel, consider disabling the execution of external files until a patch is available. For Microsoft 365 Apps for Enterprise, restrict access to potentially vulnerable components to minimize the risk of exploitation. For Microsoft Office, Microsoft Office Long Term Servicing Channel, and Microsoft Office Online Server, avoid using potentially vulnerable features or modules until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server versions 2.4.59 and earlier Description: The issue is related to the core of the Apache HTTP Server, where malicious or exploitable response headers from backend applications can lead to information disclosure, Server-Side Request Forgery (SSRF), or local script execution. This can be exploited by an attacker to execute arbitrary code through internal redirection. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited. Recommendations: To resolve the issue, users are recommended to upgrade to version 2.4.60, which fixes this issue. As a temporary workaround, consider restricting access to backend applications whose response headers are malicious or exploitable until the upgrade is applied. Avoid using the vulnerable core functionality of the Apache HTTP Server until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Apache HTTP Server versions 2.4.59 and earlier **Description** The issue is related to a substitution encoding problem in the mod rewrite module of the Apache HTTP Server, allowing an attacker to execute scripts in directories permitted by the configuration but not directly reachable by any URL, or disclose the source of scripts meant to be executed as CGI. **Recommendations** For Apache HTTP Server versions 2.4.59 and earlier, upgrade to version 2.4.60, which fixes this issue. As a temporary workaround, consider specifying the rewrite flag "UnsafeAllow3F" for RewriteRules that capture and substitute unsafely to prevent them from failing.

**Name of the Vulnerable Software and Affected Versions** Apache HTTP Server versions 2.4.59 and earlier **Description** The issue is related to an encoding problem in the mod proxy component of the Apache HTTP Server, which can allow an attacker to send request URLs with incorrect encoding to backend services, potentially bypassing authentication via crafted requests. This could enable a remote attacker to access confidential data and cause a denial of service. **Recommendations** For Apache HTTP Server versions 2.4.59 and earlier, upgrade to version 2.4.60, which fixes this issue.

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server versions 2.4.59 and earlier Description: The issue is related to a potential Server-Side Request Forgery (SSRF) in the mod rewrite module of the Apache HTTP Server. This allows an attacker to cause unsafe RewriteRules to unexpectedly setup URL's to be handled by mod proxy. The vulnerability is due to insufficient validation of incoming requests. Recommendations: For Apache HTTP Server versions 2.4.59 and earlier, upgrade to version 2.4.60, which fixes this issue.

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server versions 2.4.59 and earlier Description: A null pointer dereference in the mod proxy module of Apache HTTP Server allows an attacker to crash the server via a malicious request. This issue can be exploited by a remote attacker to cause a denial of service. Recommendations: For Apache HTTP Server versions 2.4.59 and earlier, upgrade to version 2.4.60, which fixes this issue. As a temporary workaround, consider restricting access to the mod proxy module to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Synology Router Manager versions prior to 1.3.1-9346-9 **Description** The issue is related to an improper limitation of a pathname to a restricted directory, also known as a 'Path Traversal' vulnerability, in the OTP reset functionality. This vulnerability allows remote authenticated users to delete arbitrary files via unspecified vectors. **Recommendations** For Synology Router Manager versions prior to 1.3.1-9346-9, update to version 1.3.1-9346-9 or later to resolve the issue. As a temporary workaround, consider restricting access to the OTP reset functionality until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** Sonos One Speaker version 70.3-35220 **Description** This issue allows network-adjacent attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the MPEG-TS parser, resulting from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this issue to execute code in the context of root. **Recommendations** For Sonos One Speaker version 70.3-35220, at the moment, there is no information about a newer version that contains a fix for this issue. As a temporary workaround, consider restricting access to the MPEG-TS parser to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Microsoft Exchange Server (affected versions not specified) **Description** The issue is related to insufficient access controls in Microsoft Exchange Server, which can be exploited by a remote attacker to elevate their privileges. This can affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Exchange Server (affected versions not specified) **Description** The issue is related to insufficient access controls in Microsoft Exchange Server, which can be exploited by a remote attacker to disclose protected information. This can allow malicious actors to gain access to sensitive information and potentially impact the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Exchange Server (affected versions not specified) **Description** The issue is related to an information disclosure vulnerability. It may allow a remote attacker to gain unauthorized access to protected information. The vulnerability can be exploited to obtain important information and impact the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows IIS Server (affected versions not specified) **Description** The issue is related to insufficient access control in the Windows IIS Server, which can be exploited by a remote attacker to elevate their privileges. This can affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Internet Information Services (IIS) (affected versions not specified) **Description** The issue is related to an uncontrolled consumption of resources in the Microsoft Internet Information Services (IIS) package, which can lead to a denial-of-service condition. This can be exploited by a remote attacker to cause a service disruption. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Internet Information Services (affected versions not specified) **Description** The issue is related to the Cachuri Module in Microsoft Internet Information Services (IIS) and involves incorrect clearance or release of resources. This can be exploited by a remote attacker to cause a denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** .NET Core 3.1 versions prior to 3.1.25 .NET 5.0 versions prior to 5.0.17 .NET 6.0 versions prior to 6.0.5 **Description** The issue is related to a Denial of Service vulnerability in .NET and Visual Studio, where a malicious client can manipulate cookies and cause a Denial of Service. This vulnerability exists due to incorrect cleanup or release of resources. **Recommendations** For .NET Core 3.1 versions prior to 3.1.25, update to Runtime 3.1.25 or SDK 3.1.419. For .NET 5.0 versions prior to 5.0.17, update to Runtime 5.0.17 or SDK 5.0.214. For .NET 6.0 versions prior to 6.0.5, update to Runtime 6.0.5 or SDK 6.0.105.

**Name of the Vulnerable Software and Affected Versions** .NET Framework (affected versions not specified) **Description** The issue is related to incorrect cleanup or release of resources in the .NET Framework, which can be exploited by a remote attacker to cause a denial of service, affecting the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Netatalk (affected versions not specified) **Description** This issue allows remote attackers to disclose sensitive information on affected installations of Netatalk. Authentication is not required to exploit this issue. The specific flaw exists within the `getdirparams` method. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Netatalk (affected versions not specified) **Description** This issue allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this issue. The specific flaw exists within the `setfilparams` function. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this issue to execute code in the context of root. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Sonos One Speaker versions prior to 3.4.1 (S2 systems) Sonos One Speaker versions prior to 11.2.13 build 57923290 (S1 systems) **Description** This issue allows network-adjacent attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the `anacapd` daemon. The issue results from the lack of proper validation of user-supplied data, which can result in an integer underflow before writing to memory. An attacker can leverage this issue to execute code in the context of `root`. **Recommendations** For versions prior to 3.4.1 (S2 systems), update to version 3.4.1 or later. For versions prior to 11.2.13 build 57923290 (S1 systems), update to version 11.2.13 build 57923290 or later. As a temporary workaround, consider disabling the `anacapd` daemon until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Apache HTTP Server versions 2.4.59 and earlier **Description** The vulnerability is caused by improper escaping of output in the mod rewrite module of Apache HTTP Server. This allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally or directly reachable by any URL, resulting in code execution or source code disclosure. Substitutions in server context that use backreferences or variables as the first segment of the substitution are affected. Some unsafe RewriteRules will be broken by this change, and the rewrite flag "UnsafePrefixStat" can be used to opt back in once ensuring the substitution is appropriately constrained. The vulnerability has been exploited in the wild, with instances of unauthorized access to files and potential session hijacking reported. **Recommendations** Apache HTTP Server 2.4.59 and earlier: Update to Apache HTTP Server 2.4.60 or later to fix the vulnerability. As a temporary workaround, consider disabling the mod rewrite module or restricting its use to minimize the risk of exploitation. Restrict access to the mod rewrite module to minimize the risk of exploitation. Avoid using substitutions in server context that use backreferences or variables as the first segment of the substitution until the issue is resolved.