8221 matches found
Astra Linux – Vulnerability in mbedtls
A vulnerability was discovered in Mbed TLS 2.x before version 2.28.7, and also in Mbed TLS 3.x before version 3.5.2. There was a timing-related side channel involved in RSA private operations. This side channel could allow a local attacker to recover the plaintext. To exploit this vulnerability,...
Astra Linux – Vulnerability in liblivemedia
Live555 suffers from 1.08, which mishandles large requests for the same MP3 stream, leading to recursion and excessive buffer overflows based on the stack mechanism. An attacker can exploit this vulnerability to launch a DoS attack...
Astra Linux – Vulnerability in Chromium
The use of after-free in Dawn, prior to version 126.0.6478.54, allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
In Dawn, out-of-bounds memory access in Google Chrome before version 126.0.6478.114 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
The use of “after free” in Audio in Google Chrome before version 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption through a crafted PDF file. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
The use of after-free in Dawn, prior to version 126.0.6478.114, allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: net: fixed the race condition in dstnegativeadvice The dstnegativeadvice function does not enforce proper RCU rules when sk-dstcache must be cleared, leading to a potential Use-After-Free error UAF. RCU rules state that we must...
Astra Linux – Vulnerability in liblivemedia
Vulnerability in the AC3AudioFileServerMediaSubsession, ADTSAudioFileServerMediaSubsession, and AMRAudioFileServerMediaSubsessionLive OnDemandServerMediaSubsession subclasses in Networks LIVE555 Streaming Media before 2021.3.16...
Astra Linux – Vulnerability in mbedtls
Integer overflow vulnerability in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2. Attackers can exploit this vulnerability to cause a denial of service DoS attack through the mbedtlsx509setextension function...
Astra Linux – Vulnerability in liblivemedia
In Live Networks, Inc., liblivemedia version 20200625, there is a potential buffer overflow bug in the server’s handling of the RTSP “PLAY” command, especially when the command specifies seeking by absolute time...
The vulnerability of the drm_mode_setcrtc() function in the drivers/gpu/drm/drm_crtc.c file of the DRM driver for the Astra Linux Special Edition operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failure.
The vulnerability of the drmmodesetcrtc function in the drivers/gpu/drm/drmcrtc.c file of the DRM driver for the Astra Linux Special Edition operating system is related to access and manipulation of dynamically allocated uninitialized memory. Exploiting this vulnerability could allow an attacker ...
PT-2023-36413 · Astra Linux · Astra Linux Special Edition
Уязвимость функции drm mode setcrtc в модуле drivers/gpu/drm/drm crtc.c драйвера DRM ядра операционной системы Astra Linux Special Edition связана с доступом и работой с динамической неинициализированной памятью. Эксплуатация уязвимости может позволить нарушителю получить доступ к конфиденциальны...
The vulnerability of the centralized system for managing user identities in FreeIPA, which is used by Astra Linux operating systems, allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of the centralized system for managing user identities in FreeIPA for Astra Linux operating systems is related to a configuration error that allows unauthorized access to user password hashes. Exploiting this vulnerability enables an attacker who operates remotely to gain access...
The vulnerability of the Wine package on the Astra Linux (Orel) operating system relates to the display of external program windows over the Astra Linux (Orel) lock window, allowing a intruder to gain unauthorized access to confidential information.
The vulnerability of the Wine software on the Astra Linux operating system Orel relates to the display of modal windows of third-party programs such as “MediaLog” over the Astra Linux lock screen. Exploiting this vulnerability could allow a malicious individual to gain unauthorized access to...
PT-2021-13364 · Astra Linux · Astra Linux
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The provided descriptions do not contain sufficient information to summarize the key details about the issue. Recommendations: At the moment, there is n...
The vulnerability of the Astra Linux Directory Service Management System (ALD) allows a violator to trigger a service failure by preventing resources from being released after their useful life has expired.
The vulnerability of the Astra Linux Directory Service Management System ALD is related to the improper termination of software during operation. Exploiting this vulnerability can allow attackers to cause service failures...
The vulnerability of the Astra Linux Directory service’s EPP management system, which is related to insufficient verification of data authenticity, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the Astra Linux Directory Service Management System ALD is related to an error in obtaining the Samba domain name from the server in console mode. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause service failur...
The vulnerability of the Astra Linux Directory service’s EPW management system, related to the escape of operations beyond the buffer in memory, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the Astra Linux Directory Service Management System ALD is related to an error that causes operations to go beyond the memory limit. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...
The vulnerability of the Astra Linux Directory Service Management System (ALD) allows a violator to trigger a service failure by preventing resources from being released after their useful life has expired.
The vulnerability of the Astra Linux Directory Service Management System ALD is related to the improper termination of software programs. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the Astra Linux Directory service’s EPPT management system, related to improper access control, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the Astra Linux Directory Service Management System ALD is related to an error in setting the integrity of directories. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...