206316 matches found
Astra Linux – Vulnerability in Chromium
Improper state validation in the Parser component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code within the sandbox through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in SOX
A vulnerability was discovered in SoX, where a heap buffer overflow occurs in the startread function in the hcom.c file. This vulnerability can be exploited by using a specially crafted hcomn file, which may cause the application to crash...
Astra Linux – Vulnerability in Chromium
Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
Insufficient policy enforcement in navigation in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
The use of “after free” in DNS in Google Chrome before version 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: Low...
Astra Linux – Vulnerability in Chromium
Incorrect authorization in the GetUserMedia function in Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to obtain sensitive information through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
A buffer overflow in the Network component of Google Chrome prior to version 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: xhci: dbgtty: Fixed an issue where unregister was called again after module exit due to a failure in ttyregisterdriver. If ttyregisterdriver fails, it releases the reference, but fails to set dbcttydriver to NULL, causing...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Call srcu when importing watchpoint data. The function importwpinfo backs up the original guest memory contents of a watchpoint using readguestabs. This function is equivalent to kvmreadguest, and it resolves the issue...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: parisc: eisa: Fixed an infinite loop that occurred when parsing an invalid IRQ value. When an invalid value is passed via the “eisairqedge=” kernel command-line parameter e.g., “eisairqedge=16,5”, the eisairqsetup function prints...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: coresight: etm4x: fixed an underflow issue when using nrseqstate - 1 for initialization or setting TRCSEQEVR, where the number of transitions varies from 0 to 2 when TRCIDR5.NUMSEQSTATE is 0b100; otherwise, TRCIDR5.NUMSEQSTATE is...
Astra Linux – Vulnerability in Chromium
Integer overflow in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Incomplete cleanup in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leverage social engineering to bypass system access restrictions through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
A observable discrepancy in the DOM in Google Chrome prior to version 153.0.8010.36 allowed a remote attacker to leverage social engineering to obtain sensitive information through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Apache2
A regression in Apache HTTP Server 2.4.60 ignores some uses of the legacy content-type-based configuration for handlers. Configurations like “AddType” and similar settings, under certain circumstances where files are requested indirectly, can lead to exposure of local content in the source code...
Astra Linux – Vulnerability in Chromium
Information leakage in ServiceWorker in Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to obtain cross-origin data through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: afunix: Do not use GC if MSGPEEK occurred. Igor Ushakov reported that GC purged the receive queue of a live socket due to a race with MSGPEEK, with a fix provided. This is exactly the same issue that was previously fixed in the...