Padma81

**Name of the Vulnerable Software and Affected Versions** OpenLDAP versions 2.4.57 and 2.5.x through 2.5.1alpha **Description** The issue is related to an assertion failure in the `issuerAndThisUpdateCheck` function, which can occur via a crafted packet with a short timestamp, resulting in a denial of service (daemon exit). This is related to `schema init.c` and `checkTime`. The vulnerability can be exploited by a remote attacker, allowing them to send a specially crafted packet to `slapd` and execute a denial of service attack. **Recommendations** For OpenLDAP versions 2.4.57 and 2.5.x through 2.5.1alpha, consider disabling the `issuerAndThisUpdateCheck` function as a temporary workaround until a patch is available. Restrict access to the `schema init.c` and `checkTime` components to minimize the risk of exploitation. Avoid using crafted packets with short timestamps in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** GLib versions prior to 2.66.7 GLib versions 2.67.x prior to 2.67.4 **Description** The issue is related to the function `g byte array new take()` in the GLib library, which is associated with the copying of a buffer without checking the size of the input data. If this function is called with a buffer of 4GB or more on a 64-bit platform, the length would be truncated modulo 2**32, causing unintended length truncation. This could potentially allow a remote attacker to execute arbitrary code. **Recommendations** For GLib versions prior to 2.66.7, update to version 2.66.7 or later. For GLib versions 2.67.x prior to 2.67.4, update to version 2.67.4 or later. As a temporary workaround, consider avoiding the use of the `g byte array new take()` function with large buffers until a patch is available.

**Name of the Vulnerable Software and Affected Versions** OpenLDAP versions prior to 2.4.57 **Description** The issue is related to an incompatible type access in the OpenLDAP protocol implementation. It allows a remote attacker to send a specially crafted request to slapd, potentially leading to a denial of service (DoS) attack. The flaw is in the ldap X509dn2bv function and affects the X.509 DN parsing in ad keystring, causing a slapd crash. **Recommendations** For OpenLDAP versions prior to 2.4.57, update to version 2.4.57 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable ldap X509dn2bv function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** OpenLDAP versions prior to 2.4.57 **Description** The issue is related to a double free vulnerability in the OpenLDAP protocol, which can be exploited by a remote attacker to cause a denial of service (DoS) by sending a specially crafted request to slapd. This can lead to a crash in the saslAuthzTo processing. **Recommendations** For versions prior to 2.4.57, update to version 2.4.57 or later to resolve the issue. As a temporary workaround, consider restricting access to the saslAuthzTo processing to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** OpenLDAP versions prior to 2.4.57 **Description** The issue is related to a double free memory error during the handling of the Values Return Filter control, which can lead to a denial of service (DoS) when a specially crafted request is sent to slapd. This can cause the slapd service to crash, resulting in an out-of-bounds read. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited. **Recommendations** For OpenLDAP versions prior to 2.4.57, update to version 2.4.57 or later to resolve the issue. As a temporary workaround, consider restricting access to the Values Return Filter control to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** GNU Tar versions prior to 1.32 **Description** The issue arises from a NULL pointer dereference in the `pax decode header` function within `sparse.c` when parsing certain archives with malformed extended headers. **Recommendations** For GNU Tar versions prior to 1.32, update to version 1.32 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** systemd versions prior to 237 **Description** The issue is related to the mishandling of symlinks by systemd-tmpfiles in systemd, allowing local users to obtain ownership of arbitrary files. This occurs through the creation of a directory and a file under that directory, and later replacing that directory with a symlink. The issue persists even when the fs.protected symlinks sysctl is enabled. **Recommendations** For versions prior to 237, update to a version that includes the fix for this issue to prevent exploitation. As a temporary workaround, consider restricting the use of systemd-tmpfiles to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** curl versions prior to 7.51.0 **Description** The issue arises from curl's use of the outdated IDNA 2003 standard to handle International Domain Names, which may lead users to unknowingly issue network transfer requests to the wrong host. This is particularly problematic with domains using special characters, such as the German ß character, which is translated differently in IDNA 2003 and the modern IDNA 2008 standard. For instance, the domain `straße.de` is translated to `strasse.de` using IDNA 2003, but to `xn--strae-oqa.de` using IDNA 2008, potentially resolving to different addresses. **Recommendations** For versions prior to 7.51.0, update to version 7.51.0 or later to resolve the issue. As a temporary workaround, consider avoiding the use of International Domain Names with special characters until the update is applied. Restrict access to DNS-using protocols in curl when built with libidn to minimize the risk of exploitation. Avoid using curl with libidn for domains that require IDNA 2008, such as `.de` domains, until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** curl versions prior to 7.51.0 **Description** A flaw in the way curl handles cookies allows other threads to trigger a use-after-free, leading to information disclosure. This occurs because curl permits users to share cookies between multiple easy handles that are concurrently employed by different threads. When cookies are collected to be sent to a server, the matching function returns a list with references to the original strings, but if another thread quickly takes the lock and frees one of the original cookie structs together with its strings, a use-after-free can occur. Additionally, another thread can replace the contents of the cookies from separate HTTP responses or API calls. **Recommendations** For versions prior to 7.51.0, update to version 7.51.0 or later to resolve the issue. As a temporary workaround, consider restricting concurrent access to shared cookies between multiple easy handles to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Oracle Java SE versions 6u121, 7u111, and 8u102 **Description** The issue affects confidentiality, integrity, and availability. It is related to vectors concerning 2D. **Recommendations** For Oracle Java SE version 6u121, update to a version that addresses this issue. For Oracle Java SE version 7u111, update to a version that addresses this issue. For Oracle Java SE version 8u102, update to a version that addresses this issue.

**Name of the Vulnerable Software and Affected Versions** Oracle Java SE versions 6u121, 7u111, 8u102 Oracle Java SE Embedded version 8u101 **Description** The issue affects confidentiality, integrity, and availability. It is related to vectors concerning Hotspot. **Recommendations** For Oracle Java SE versions 6u121, 7u111, 8u102, and Java SE Embedded version 8u101, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Expat (affected versions not specified) **Description** The XML parser in Expat does not use sufficient entropy for hash initialization, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted identifiers in an XML document. This issue exists because of an incomplete fix for a previous vulnerability. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** libpng versions 0.90 through 0.99 libpng versions 1.0.x before 1.0.66 libpng versions 1.1.x and 1.2.x before 1.2.56 libpng versions 1.3.x and 1.4.x before 1.4.19 libpng versions 1.5.x before 1.5.26 **Description** The issue is caused by an integer underflow in the `png check keyword` function in `pngwutil.c`, which allows remote attackers to have an unspecified impact via a space character as a keyword in a PNG image, triggering an out-of-bounds read. This could potentially affect the integrity, availability, and confidentiality of information. The vulnerability may be exploited by sending a specially crafted PNG image with a space character in the keyword. **Recommendations** For libpng versions 0.90 through 0.99, update to a version outside of this range to mitigate the issue. For libpng versions 1.0.x before 1.0.66, update to version 1.0.66 or later. For libpng versions 1.1.x and 1.2.x before 1.2.56, update to version 1.2.56 or later. For libpng versions 1.3.x and 1.4.x before 1.4.19, update to version 1.4.19 or later. For libpng versions 1.5.x before 1.5.26, update to version 1.5.26 or later. As a temporary workaround, consider restricting the use of PNG images with space characters in keywords until a patch is available.

**Name of the Vulnerable Software and Affected Versions** cracklib (affected versions not specified) **Description** The issue is related to a stack-based buffer overflow in the FascistGecosUser function, located in lib/fascist.c. This overflow can be triggered by a long GECOS field, which involves a long buffer. As a result, local users may cause a denial of service, leading to an application crash, or potentially gain privileges. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** glibc versions prior to 2.28 **Description** The issue is related to the parse reg exp function in the GNU C Library, which misparses alternatives. This can allow attackers to cause a denial of service, resulting in an assertion failure and application exit, or trigger an incorrect result by attempting a regular-expression match. The vulnerability is associated with data processing errors. **Recommendations** For versions prior to 2.28, update to version 2.28 or later to resolve the issue. As a temporary workaround, consider restricting the use of regular expressions in affected applications until a patch is available.