Gentoo Linux Security Advisory GLSA 200504-11 – James Ranson reported a vulnerability when JunkBuster is configured to run in single-threaded mode, an attacker can modify the referrer setting by getting a victim to request a specially crafted URL. Tavis Ormandy of the Gentoo Linux Security Audit Team identified a heap corruption issue in the filtering of URLs. Versions less than 2.0.2-r3 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/37206/glsa-200504-11.txt
Source: https://packetstormsecurity.com/files/37206/Gentoo-Linux-Security-Advisory-200504-11.html