Astra Linux - уязвимость в vim

Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

Astra Linux - уязвимость в vim

Use After Free in GitHub repository vim/vim prior to 8.2...

Astra Linux - уязвимость в vim

Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

Astra Linux - уязвимость в vim

Use After Free in GitHub repository vim/vim prior to 8.2...

Astra Linux - уязвимость в vim

Use After Free in GitHub repository vim/vim prior to 8.2...

Astra Linux - уязвимость в vim

Vim is an open source, command line text editor. Patch v9.1.0038 optimized how the cursor position is calculated and removed a loop, that verified that the cursor position always points inside a line and does not become invalid by pointing beyond the end of a line. Back then we assumed this loop ...

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: Fix double free of skb in coredump hcidevcdappend would free the skb on error so the caller don't have to free it again otherwise it would cause the double free of skb. Reported-by : Dan Carpenter...

Astra Linux - уязвимость в thunderbird

Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript. Starting with version 17.1.0-rc.1, improperly formed beacon events can disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data safely. Note that the...

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix possible UAF in amdgpucspass1 Since the gangsize check is outside of chunk parsing loop, we need to reset i before we free the chunk data. Suggested by Ye Zhang @VAR10CK of Baidu Security...

Astra Linux - уязвимость в curl

libcurl's URL API function curlurlget offers punycode conversions, to and from IDN. Asking to convert a name that is exactly 256 bytes, libcurl ends up reading outside of a stack based buffer when built to use the macidn IDN backend. The conversion function then fills up the provided buffer exact...

Astra Linux - уязвимость в vim

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...

Astra Linux - уязвимость в wireshark

Memory handling issue in editcap could cause denial of service via crafted capture file...

Astra Linux - уязвимость в u-boot

Das U-Boot versions 2019.07-rc1 through 2019.07-rc4 can double-free a cached block of data when listing files in a crafted ext4 filesystem...

Astra Linux - уязвимость в vim

vim is vulnerable to Use After Free...

Astra Linux - уязвимость в vim

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...

Astra Linux - уязвимость в wireshark

FiveCo RAP dissector infinite loop in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file...

Astra Linux - уязвимость в wireshark

Crash in the OPUS protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture file...

Astra Linux - уязвимость в pypdf2

pypdf is a pure-python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files. In version 2.10.5 an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This infinite loop blocks the current process and can utilize a single co...

Astra Linux - уязвимость в vim

Buffer Over-read in GitHub repository vim/vim prior to 8.2...

Astra Linux - уязвимость в tcl8.6

In Tcl 8.6.11, a format string vulnerability in nmakehlp.c might allow code execution via a crafted file. NOTE: multiple third parties dispute the significance of this finding...