Author: Cyberthreat Blog

The Content-Encoding HTTP header feature in ws-xmlrpc 3.1.3 as used in Apache Archiva allows remote attackers to cause a denial of service (resource consumption) by decompressing a large file containing zeroes.

The VersionMapper.fromKernelVersionString method in oVirt Engine allows remote authenticated users to cause a denial of service (process crash) for all VMs.

PostgreSQL PL/Java before 1.5.0 allows remote authenticated users to alter type mappings for types they do not own.

game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash).

The spice-gtk widget allows remote authenticated users to obtain information from the host clipboard.