Several recently discovered vulnerabilities:
- In the corrective release of Perl 5.38.1, a vulnerability (CVE-2023-47038) has been fixed that could lead to a single byte being written outside the allocated buffer when processing compiled regular expressions with an incorrectly redefined internal Unicode property whose name starts with "utf8::perl". The issue manifests starting from the Perl 5.30 branch.
Additionally, Perl 5.38.1 addresses a Windows-specific vulnerability (CVE-2023-47039) that allows code execution when scripts are run with the ability to place a cmd.exe file in the current directory (due to a lack of path sanitization for executable files, Perl first attempts to launch cmd.exe from the current directory). For instance, an attacker could place their cmd.exe in the C:\ProgramData directory and elevate their privileges if an administrator runs a Perl script from that directory.
- A vulnerability (CVE-2023-49103) has been identified in the ownCloud cloud platform, from which the Nextcloud project was separated in 2016. This vulnerability affects the graphapi application and allows the determination of the contents of environment variables that may contain the administrator password, license key, and email connection credentials. serverThe issue is caused by the use of a third-party library in graphapi that includes a handler for GetPhpInfo.php, which calls the phpinfo() function, producing output that includes environment variables.
- Two vulnerabilities have been identified in the GStreamer multimedia framework: CVE-2023-44446, which involves a use-after-free memory access in the code for parsing MXF files; and CVE-2023-44429, which involves a buffer overflow in the code for parsing the AV1 format. The first issue is caused by a lack of object checks before performing operations on it, while the second issue is caused by a lack of data size checks before copying to a fixed buffer. These vulnerabilities could lead to the execution of attacker code when attempting to process specially crafted MXF files and multimedia data in the AV1 format. It is noted that the attack vectors depend on the implementation of the targeted application. The vulnerabilities have been assigned a severity level of 8.8 out of 10. The vulnerabilities have been fixed in the GStreamer 1.22.7 release.
- The Zephyr RTOS real-time operating system has identified 25 vulnerabilities, most of which could potentially allow an attacker to execute code. The vulnerabilities were caused by buffer overflows in the WiFi shell, Bluetooth stack, IPM driver, USB stack, IEEE 802.15.4 driver, Mgmt subsystem, file system, eS-WiFi driver, and CANbus subsystem. Most vulnerabilities were addressed in the Zephyr 3.5.0 release, but one issue (CVE-2023-4261) remains unpatched (details regarding this vulnerability are not published until a fix is available).
Source: opennet.ru
