The vulnerability of the libvirt virtualization management package in the Astra Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the libvirt virtualization management package in the Astra Linux operating system is related to the incorrect assignment of token labels to external file storage systems with integrity control tokens enabled. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerability of the linux-astra-modules package of the Astra Linux operating system, which allows a hacker to circumvent established security policy rules

The vulnerability of the linux-astra-modules package in the Astra Linux operating system is related to an access control permission assignment error, which allows for bypassing the closed software environment by writing to /proc/$PID/mem. Exploiting this vulnerability can enable a perpetrator to...

The vulnerability of the opensc authentication package for smart cards and system USB tokens in the Astra Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the opensc authentication package for smart cards and operating system USB tokens in Astra Linux is related to incorrect operation of the Rutek S drivers. Exploiting this vulnerability can allow a hacker to cause service failure...

The vulnerability of the windowing system for building the graphical user interface of the xorg operating system in Astra Linux allows a hacker to alter the settings of the X-Session.

The vulnerability of the window system for creating a graphical user interface in the Astra Linux operating system’s xorg lies in an incorrect setting of the allow-user-xsession parameter in "/etc/X11/Xsession.options". Exploiting this vulnerability could allow a hacker to alter the default...

The vulnerability of the command-line tool astra-openvpn-server for configuring OpenVPN servers on the Astra Linux operating system stems from a configuration parameter interpretation error in the client software. This flaw allows an attacker to cause a service failure.

The vulnerability of the command-line tool astra-openvpn-server for configuring OpenVPN servers on the Astra Linux operating system is related to an interpretation error in the configuration parameters set for clients. Exploiting this vulnerability allows a malicious actor to cause service failur...

The vulnerability of the password generation and quality assessment library in Astra Linux’s operating system, libpam-pwquality, is related to a configuration error that allows an attacker to gain unauthorized access to the system.

The vulnerability of the password generation and quality assessment library in the Astra Linux operating system is related to a configuration error that causes no checks are performed to ensure that domain user passwords comply with the specified security policies. Exploiting this vulnerability...

The vulnerability of the graphical user input component in the fly-dm system of the Astra Linux operating system allows a intruder to unauthorizedly alter the level of session integrity.

The vulnerability of the graphical user input component in the fly-dm system of the Astra Linux operating system is related to an error that causes the fly-mac-dialog component to be executed without the required DBUSSESSIONBUSADDRESS=nothing option. This option is necessary for executing the dbu...

The vulnerability of the fly-weather weather-checking package for the Astra Linux operating system allows a violator to trigger a service failure.

The vulnerability of the fly-weather weather-checking package for the Astra Linux operating system is related to an improper limitation on the buffer used for downloaded data. Exploiting this vulnerability could allow a hacker to cause a service failure...

The vulnerability of the software dpkg, used for installing, removing, and retrieving information about deb-packages in the Astra Linux operating system, relates to a security feature that allows an attacker to compromise the integrity of the installed package.

The vulnerability in the dpkg software, which is used for installing, removing, and retrieving information about deb-packages in the Astra Linux operating system, relates to the verification of package integrity during installation. Exploiting this vulnerability allows a malicious actor to...

The vulnerability of the graphical user input component in the fly-dm operating system of Astra Linux allows a hacker to execute arbitrary code.

The vulnerability of the graphical user interface component in the fly-dm system of the Astra Linux operating system is related to an error that allows control over the systemd daemon by generating commands like “fly-dmctl suspendtohyibernate-p”, which execute the command “systemctl -p...

The vulnerability of the linux-astra-modules package of the Astra Linux operating system allows a hacker to gain unauthorized access to data.

The vulnerability of the linux-astra-modules package in the Astra Linux operating system is related to an error that causes information leakage through the prlimit utility for reading/setting limit values. Exploiting this vulnerability can allow a perpetrator to gain unauthorized access to data...

The vulnerability of the fly-admin-ntp package for managing NTP time services on the Astra Linux operating system allows a perpetrator to cause a service failure.

The vulnerability of the fly-admin-ntp package for managing NTP time services on the Astra Linux operating system is related to incorrect syntax analysis and processing of the configuration file. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the fly-admin-digsig package in the Astra Linux operating system allows a perpetrator to compromise the integrity of protected data.

The vulnerability of the fly-admin-digsig package in the Astra Linux operating system is related to an error that causes incorrect calculation of the digital signature for hidden files. Exploiting this vulnerability could allow a attacker to compromise the integrity of protected data...

The vulnerability of the access control service for remote catalogs and the authentication mechanism of the Astra Linux operating system allow a intruder to trigger a service failure.

The vulnerability of the access control service for remote catalogs and the authentication mechanism of the Astra Linux operating system is related to a flaw that causes domain users to be unable to obtain token credentials during authentication when they lose connection to the domain server...

The vulnerability of the adduser utility in the Astra Linux operating system, which allows a hacker to trigger a service failure.

The vulnerability of the adduser utility in the Astra Linux operating system is related to an error in assigning mandatory integrity attributes, which prevents access to the user’s home directory. When creating a user, a level of integrity other than 0 was set for their home directory. Exploiting...

The vulnerability of the account management utility for the Shadow operating system in Astra Linux, which allows a hacker to trigger a service failure

The vulnerability of the account management utility for the Shadow operating system Astra Linux relates to the incorrect assignment of the permission level during user creation. Exploiting this vulnerability allows an attacker with privileged user rights to block access for newly created users...

The vulnerability of the graphical input utility in the fly-qdm system of the Astra Linux operating system, which allows a intruder to cause a service failure.

The vulnerability of the graphical input utility in the fly-qdm system of the Astra Linux operating system is related to buffer overflows during the copying of lines with commands from the virtual keyboard. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the fly-admin-gmc component, a graphical tool for administering domains and clients in the ALD fly-admin-ald-server operating system of Astra Linux, allows a perpetrator to cause service interruptions.

The vulnerability of the fly-admin-gmc graphical tool for administering domains and clients in the Astra Linux operating system relates to the improper assignment of token attributes during user creation in ALD. Exploiting this vulnerability allows an attacker to block new users from accessing th...

The vulnerability of the ald-parse security extension of the ALD service in the Astra Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ald-parse security extension of the ALD service in the Astra Linux operating system is related to an error in assigning access rights to the cache of token metadata for certain services. This leads to its continuous reallocation. Exploiting this vulnerability allows a...

The vulnerability of the fly-admin-mic utility in the Astra Linux operating system, which allows a intruder to cause a service failure

The vulnerability of the fly-admin-mic utility in the Astra Linux operating system is related to an incorrect interpretation of the operation to disable mandate integrity control. Exploiting this vulnerability can allow a perpetrator to cause a service failure...