There is a heap-based buffer overflow at the function read_string in utilities/pspp-dump-sav.c, which allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact.Īn issue was discovered in PSPP 1.6.2. During an attack, an authoritative server must return large NS sets or address sets.Īn issue was discovered in PSPP 1.6.2. Knot Resolver before 5.5.3 allows remote attackers to cause a denial of service (CPU consumption) because of algorithmic complexity. KDiskMark before 3.1.0 lacks authorization checking for D-Bus methods such as Helper::flushPageCache.Īn unauthenticated user can create a link with reflected Javascript code inside the backurl parameter and send it to other authenticated users in order to create a fake account with predefined login, password and role in Zabbix Frontend.Ĭfg_tilde_expand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read. Libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c. The user must display attacker-controlled content in the terminal, then click on a notification popup. In Kitty before 0.26.2, insufficient validation in the desktop notification escape sequence can lead to arbitrary code execution. Use of mod_fastcgi is, for example, affected. It is related to RDHUP mishandling in certain HTTP/1.1 chunked situations.

A resource leak in gw_backend.c in lighttpd 1.4.56 through 1.4.66 could lead to a denial of service (connection-slot exhaustion) after a large amount of anomalous TCP behavior by clients.

Crack mirc 7.41 ide