Alertas de Seguridad de la Información

Transient DOS when processing a continuous receive command with a zero-sized global configuration override.

Se identificó una vulnerabilidad de lectura fuera de límites (out-of-bounds read) en el analizador de respuestas RECORD de libXtst anterior a versión 1.2.6. Un servidor X malicioso podría explotar esta falla para provocar el bloqueo (denial of service) de clientes X conectados. Esta vulnerabilidad afecta principalmente a entornos de infraestructura de escritorio remoto y sistemas con autenticación X11, comunes en infraestructura empresarial de LATAM.

Buffer over-read vulnerability in Apache Tomcat Native during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash. This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, from 1.3.0 through 1.3.8. Earlier, unsupported versions may also be affected. Users are recommended to upgrade to version 1.3.9 or 2.0.16, which fix the issue.

Information Disclosure when a pointer is reused after being deallocated.

Transient DOS while parsing frame during channel usage.

Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.

Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled.

Transient DOS when processing authentication frames with invalid FILS information element header lengths.