The vulnerability of the fly-admin-ald-se component in the FLY operating system environment of Astra Linux, related to improper access control, allows a intruder to trigger a service failure.

The vulnerability of the fly-admin-ald-se component in the FLY operating system environment of Astra Linux is related to incorrect configuration of security contexts when adding/removing users who are part of the administrator group. Exploiting this vulnerability allows a malicious actor to cause...

The vulnerability of the fly-admin-ald-server component in the FLY operating system environment of Astra Linux, related to a bug in access management, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the fly-admin-ald-server component in the FLY operating system environment of Astra Linux is related to configuration errors that lead to the addition of already deleted users to a newly created user group. Exploiting this vulnerability allows an attacker who operates remotel...

The vulnerability of the fly-admin-gmc-se component in the FLY operating system environment of Astra Linux, related to improper access control, allows a intruder to trigger a service failure.

The vulnerability of the fly-admin-gmc-se component in the FLY operating system environment of Astra Linux is related to an error that causes a significant delay in opening a folder with the ELF filter enabled. Exploiting this vulnerability allows a remote attacker to cause a service failure...

The vulnerability of the fly-admin-local component in the FLY operating system environment of the Astra Linux platform involves incorrect processing of input data. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the fly-admin-local component in the FLY operating system environment of Astra Linux is related to the malfunction of the utility when the network is disconnected. Additionally, there is an incorrect interpretation of parameters in the configuration files for pam-tally and...

The vulnerability of the goldendict software package for the Astra Linux operating system arises from a validation error in the input data received from web servers. This error allows attackers to perform spoofing attacks.

The vulnerability of the goldendict software package for the Astra Linux operating system is related to a validation error in the input data received from web servers. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks...

The vulnerability of the Astra Linux operating system, related to deficiencies in the screen locking mechanism, allows a intruder to bypass the screen lock mechanism.

The vulnerability of the Astra Linux operating system is related to deficiencies in the screen locking mechanism. Exploiting this vulnerability could allow a hacker to bypass the screen lock and gain access to execute code under the identity of the user who entered the system...

The vulnerability of the goldendict software package for the Astra Linux operating system arises from a validation error in the input data received from web servers. This error allows attackers to trigger a service failure.

The vulnerability of the goldendict software package for the Astra Linux operating system is related to a validation error in the input data received from web servers. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

The vulnerability of the fly-wm window manager in the Astra Linux operating system allows a hacker to gain access to confidential data.

The vulnerability of the fly-wm window manager in the Astra Linux operating system is related to errors in the algorithm for calculating permissions when changing the size of the window of the built-in screen locker. This allows confidential data to be displayed in a virtual machine or in an...

The vulnerability of the fly-weather software package for the Astra Linux operating system, related to a validation error in the input data received from web servers, allows attackers to trigger a service failure.

The vulnerability of the fly-weather software package for the Astra Linux operating system is related to a validation error in the input data received from the web server. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

The vulnerability of the fly-weather software package for the Astra Linux operating system, related to a validation error in the input data received from web servers, allows attackers to perform spoofing attacks.

The vulnerability of the fly-weather software package for the Astra Linux operating system is related to a validation error in the input data received from web servers. Exploiting this vulnerability can allow attackers to perform spoofing attacks...

The vulnerability in the implementation of the ems_usb_disconnect handler in the Astra Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the emsusbdisconnect handler in the Astra Linux operating system’s kernel is related to a memory release error. In the emsusbprobe function, located in the drivers/net/can/usb/emsusb.c file, memory is allocated to the txmsgbuffer field. However, the emsusbdisconnect handler...

The vulnerability of the interrupt handler implementation “dc395xinterrupt” in the Astra Linux operating system allows a hacker to cause a service failure.

The vulnerability in the implementation of the interrupt handler dc395x Interrupt for the Astra Linux operating system’s kernel the loaded module drivers/scsi/dc395x.ko is related to a memory release error. In the function finddcb, called by the dc395x Interrupt handler, a reference is made to th...

The vulnerability in the implementation of the ddb_open handler in the kernel of the Astra Linux operating system allows a hacker to cause a service failure.

The vulnerability in the implementation of the ddbopen handler in the kernel of the Astra Linux operating system the loaded module is drivers/media/pci/ddbridge/ddbridge.ko is related to a memory leak. In the ddbopen function, a call is made to the ddbsiminorinode array, which contains 32 element...

The vulnerability of the virtio_pci_remove handler’s implementation in the Astra Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the virtiopciremove handler in the Astra Linux operating system’s kernel the loaded module drivers/virtio/virtiopci.ko is related to a memory release error. In the virtiopciprobe function, memory is allocated for vpdev, but the memory is not released in the virtiopciremove...

The vulnerability in the implementation of the hwarc_probe handler in the operating system kernel of Astra Linux allows a hacker to trigger a service failure.

The vulnerability in the implementation of the hwarcprobe function in the kernel of the Astra Linux operating system’s driver module drivers/uwb/hwa-rc.ko is related to a memory release error. In the hwarcprobe function, memory is allocated to hwarc, but this memory is not released correctly when...

The vulnerability of the fly-admin-autostart utility for configuring automatic startup of programs in the Astra Linux operating system, related to pointer assignment errors, allows a hacker to trigger a service failure.

The vulnerability of the fly-admin-autostart utility for configuring automatic startup of programs in the Astra Linux operating system is related to the lack of checking for the value of a pointer being set to NULL. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the component for integrating various authentication methods in the Astra Linux operating system arises from the use of unstable cryptographic hash functions for storing Unix passwords. This allows a hacker to gain unauthorized access to the system.

The vulnerability of the component for integrating various authentication methods in the Astra Linux operating system is related to the use of unstable cryptographic hash functions for storing Unix passwords. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the...

The vulnerability of the tool for adjusting mandate attributes of Astra Linux objects allows a hacker to circumvent the specified security policy restrictions.

The vulnerability of the “correction of mandate attributes” utility in the astrase-fix-maildir object of the Astra Linux operating system is related to an error in assigning the ehole tag to the dovecot-uidlist file, which stores the “UID filename” pair. Exploiting this vulnerability can allow a...

The vulnerability of the window manager fly-wm component in the Astra Linux operating system allows a intruder to trigger a service failure.

The vulnerability of the window blocking component of the fly-wm operating system’s Astra Linux device lies in a flaw that causes the window blocking component to fail to execute, especially when the XGrabKeyboard call has already been made by another client. Exploiting this vulnerability could...

The vulnerability of the graphical security policy management utility fly-admin-smc on the Astra Linux operating system arises from the absence of a user list and verification during the creation of levels and categories. This allows users to violate the established security policies.

The vulnerability of the fly-admin-smc security policy management graphical utility on the Astra Linux operating system is related to the absence of a user list and verification during the creation of levels and categories. Exploiting this vulnerability could allow a hacker to violate the...