Astra Linux – Vulnerability in WebKit2GTK

A race condition has been addressed through improved state handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2, and iPadOS 15.2, as well as watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution...

Astra Linux – vulnerability in gstreamer1.0, gst-plugins-good1.0

GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemuxparsetheoraextension within qtdemux.c. The vulnerability arises because the gint size variable underflows, resulting in a large unintended value being assigne...

Astra Linux – vulnerability in Firefox

Mozilla developers Bryce Seager van Dyk and the Mozilla Fuzzing Team reported potential vulnerabilities in Firefox 101. Some of these bugs exhibited signs of memory corruption; we assume that with sufficient effort, some of them could have been exploited to execute arbitrary code. This...

Astra Linux – vulnerability in webkit2gtk

The use-after-free issue has been resolved through improved memory management. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2, and iPadOS 15.2, as well as watchOS 8.3. Processing maliciously crafted web content may result in arbitrary code execution...

Astra Linux – vulnerability in webkit2gtk

A memory corruption issue has been addressed through improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, Safari 15, tvOS 15, iOS 15 and iPadOS 15, and watchOS 8. Processing maliciously crafted web content may result in arbitrary code execution...

Astra Linux – vulnerability in Chromium

After free in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted Chrome Extension. Chromium security severity: Medium...

Astra Linux – vulnerability in Chromium

Incorrect reference resolution in Tracing in Google Chrome on Windows prior to 153.0.8010.52 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

Astra Linux – vulnerability in cpio

GNU cpio version 2.13 allows attackers to execute arbitrary code by using a specially crafted pattern file, due to an integer overflow in dstring.c’s dsfgetstr function which results in an out-of-bounds heap write. NOTE: It is unclear whether there are common scenarios where the pattern file...

Astra Linux – Vulnerability in busybox

There is a stack overflow vulnerability in ash.c:6030 in busybox before version 1.35. In the environment of the Internet of Vehicles, this vulnerability can lead to the execution of arbitrary code from commands...

Astra Linux – vulnerability in Firefox

Memory safety bugs present in Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and Thunderbird 151. Some of these bugs showed evidence of memory corruption; we assume that with sufficient effort, some of them could have been exploited to execute arbitrary code. This...

Astra Linux – vulnerability in Chromium

After using “free” in Google Chrome’s Autofill feature prior to version 151.0.7922.72, a remote attacker could execute arbitrary code within a sandbox by using a specially crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

Privilege escalation in the WebUI of Google Chrome prior to version 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – vulnerability in Chromium

The lack of authorization in the FileSystem component within Google Chrome prior to version 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and employed social engineering techniques to potentially execute arbitrary code outside the sandbox by using a specially...

Astra Linux – Vulnerability in libgsf

There is an integer overflow vulnerability in the Compound Document Binary File format parser of the GNOME Project G Structured File Library libgsf version v1.14.52. A specially crafted file can lead to an integer overflow when processing the directory from the file, allowing an out-of-bounds ind...

Astra Linux – vulnerability in grub2

There is a use-after-free vulnerability in the grubcmdchainloader function. The chainloader command is used to boot up operating systems that do not support multibooting and lack direct GRUB2 support. Executing the chainloader multiple times triggers this use-after-free vulnerability. If an...

Astra Linux – Vulnerability in curl

There is a path traversal vulnerability in the 8.0.0 SFTP implementation of curl. This vulnerability causes the tilde character to be incorrectly replaced when used as a prefix in the first path element. Additionally, the tilde is intended to be used as the first element to indicate a path relati...

Astra Linux – vulnerability in Chromium

After free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

A buffer overflow in Blink within Google Chrome prior to version 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside the sandbox via a specially crafted HTML page. Chromium security severity: Medium...

Astra Linux – vulnerability in Ghostscript

An issue was found in psi/zfile.c within Artifex Ghostscript prior to version 10.04.0. Out-of-bounds data access in filenameforall may lead to arbitrary code execution...

Astra Linux – vulnerability in libtommath

An integer overflow vulnerability in mpgrow within libtom libtommath prior to commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9 enables attackers to execute arbitrary code and cause a denial of service DoS...