Astra Linux – Vulnerability in libxml2

In libxml2 before version 2.10.4, parsing certain invalid XSD schemas can lead to a NULL pointer dereferencing, followed by a segfault. This issue occurs in the xmlSchemaFixupComplexType function in xmlschemas.c...

Astra Linux – Vulnerability in Apache2

Buffer Over-read vulnerability in Apache HTTP Server due to outbound OCSP requests sent to an attacker-controlled OCSP server This issue affects Apache HTTP Server versions 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which addresses this vulnerability...

Astra Linux – Vulnerability in Apache2

A buffer overflow in modproxyhtml in the Apache HTTP Server 2.4.67 and earlier versions allows an attack by a untrusted backend. Users are recommended to upgrade to version 2.4.68, which fixes this issue...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Remove the redundant VPD flash read in the sysfs read path. The function qla2x00sysfsreadvpd calls ha-ispops-readoptrom a second time after releasing the optrommutex. This repeated read is redundant. Unlike the fir...

Astra Linux – Vulnerability in Apache2

Heap-based Buffer Overflow vulnerability in Apache HTTP Server with modxml2enc, xml2StartParse, and untrusted content This issue affects Apache HTTP Server: versions 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes this issue...

Astra Linux – Vulnerability in Apache2

Heap-based Buffer Overflow vulnerability in Apache HTTP Server with malicious backend servers and ProxyPassReverseCookie This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: usb: image: mdc800: Change kmalloc to kzalloc The kmalloc calls in usbmdc800init, for irqurbbuffer and downloadurbbuffer, have been changed to kzalloc. This prevents potential stack leaks if a shorter message is received in...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ipvs: Avoid out-of-bounds write in ipvsnaticmp Sashiko warns that a local attacker can modify the packet while it is being processed by IPVS. Some parts of the code read the IP ihl field multiple times, which can lead to...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: netfilter: nfconntrack: Defer invalid logs until after unlock is performed. TCP and SCTP conntrack processes may generate invalid packet logs while ct-lock is still held. When invalid logging is directed to nfnetlinklog, and...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: A leak has been prevented in itsvpeirqdomainalloc. When itsirqgicdomainalloc fails, itsvpeirgdomainfree fails to invoke itsvepteardown for the corresponding interrupt, resulting in a resource leak. Invoke...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: The lengths of association requests and responses are clamped before subtracting the fixed IE offsets. The function ath6klcfg80211connectevent subtracts fixed IE offsets from assocreqlen =-4 and assocresplen =-6, bo...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: netfilter: nftfib: Fixed a stale stack leak caused by the OIFNAME register. For the NFTFIBRESULTOIFNAME parameter, the destination register is declared with len = IFNAMSIZ four 32-bit registers. However, during the lookup-fail...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: KVM: s390 – Fixed an issue where olddata leaks in the guest debug error path. importwpinfo allocates a buffer called olddata per watchpoint, to backup the original guest memory contents. If a subsequent watchpoint of the same...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: drm/panel-edp: fixed the issue where the i2c adapter caused a leak during probe failures. Ensure that the reference to the i2c adapter is dropped during probe failures e.g., probe delays and also during the driver unbinding...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: KEYS: The overflow issue in keyctlpkeyparamsget2 has been fixed. The length of the internal output buffer was calculated incorrectly, which can lead to an overflow if a too-small buffer is provided. This bug has been fixed by...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: md/raid1: The free function of the r1bio structure is called when REQNOWAIT is set, and reading from the structure may block during retries. When a read operation is retried, the raid1readrequest function may be called with a...

Astra Linux – Vulnerability in Golang 1.19, Golang 1.23

Canceling a query for example, by canceling the context passed to one of the query methods during a call to the Scan method of the returned Rows can lead to unexpected results if other queries are being executed in parallel. This can cause a race condition, which may overwrite the expected result...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: Rounding up the PTP per-out pin duration The pinduration is converted from the period provided by the user to SJA1105 clock ticks. This value is then passed as the cycletime parameter to futurebasetime. Very...

Astra Linux – Vulnerability in ntfs-3g

A properly crafted NTFS image can cause an integer overflow in the memmove function, resulting in a heap-based buffer overflow in the ntfsattrrecordresize function, as of NTFS-3G version 2021.8.22...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: iwcxgb4: A potential NULL dereferencing in c4iwfillrescmidentry has been fixed. This condition must match the previous “if epcp-state == LISTEN” exactly to avoid a NULL dereferencing of either “listenep” or “ep”. The problem is...