9470 matches found
Astra Linux – Vulnerability in Firefox
The length of the certificate was not properly checked when it was added to the certificate store. In practice, only trusted data was processed. This vulnerability was fixed in Firefox 135, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135...
Astra Linux – Vulnerability in the 389-DS-base
A flaw was discovered in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server crash while sending a specific extended search request, resulting in a denial of service...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: drm/xe: The local fence was used in the error path of xemigrateclear. The purpose of the error path in xemigrateclear is to wait for the locally generated fence before returning. The code is waiting for m-fence, which could be th...
Astra Linux – Vulnerability in Chromium
A heap buffer overflow in V8 in Google Chrome prior to version 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
The use of “after free” in the Network component of Google Chrome before version 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption through a crafted web application. Chromium security severity: Medium...
Astra Linux – Vulnerability in Ruby-Rack
Rack provides an interface for developing web applications in Ruby. Before versions 2.2.13, 3.0.14, and 3.1.12, Rack::Static could serve files under the specified root: even if urls: was provided. This might lead to unexpected access to other files under the same root: directory. The vulnerabilit...
Astra Linux – Vulnerability in Intel Microcode
Improper access control in the EDECCSSA user leaf function for certain IntelR Processors with IntelR SGX may allow an authenticated user to potentially enable denial of service through local access...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: Wifi: iwlwifi: No warnings are displayed when there is a Firmware FW error. The iwltransreclaim function emits a warning if it is called when the FW is not active. However, if it is called during a pending restart, i.e., after...
Astra Linux – Vulnerability in Firefox
jar: URLs retrieve the content of local files that are packaged in ZIP archives. The null character and everything after it were ignored when retrieving the content from the archive. However, the fake extension after the null character was used to determine the type of content. This could have be...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: netsched: hfsc: Fixed a potential UAF in hfscdequeue. Similarly to the previous patch, we also need to properly protect hfscdequeue. However, for this issue, we do not have a reliable way to reproduce the problem...
Astra Linux – Vulnerability in astra-safepolicy
The vulnerability of the astra-safepolicy security configuration software is related to the lack of a data security mechanism. Exploiting this vulnerability allows attackers to access confidential data, compromise its integrity, and cause service failures...
Astra Linux – Vulnerability in usbutils
The vulnerability of the list.h component of the USButils utility is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
Astra Linux – Vulnerability in Cpio
The vulnerability of the readnamefromfile function in the Cpio archiving utility is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service interruptions...
Astra Linux – Vulnerability in usbutils
The vulnerability of the USButils utility relates to the improper release of memory before deleting the last link. Exploiting this vulnerability could allow an attacker to cause a service failure...
Astra Linux – Vulnerability in libbpf
The vulnerability of the BPF Libbpf loader library is related to errors in pointer dereferencing involving NULL. Exploiting this vulnerability could allow an attacker to cause a service failure...
Astra Linux – Vulnerability in HAPProxy
The vulnerability in the src/cfgparse.c component of the HAProxy server software is related to pointer dereferencing errors. Exploiting this vulnerability allows an attacker to cause service failures...
Astra Linux – Vulnerability in cups
The vulnerability of the raster-interpret.c component in the CUPS printing server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...
Astra Linux – Vulnerability in libbpf
The vulnerability of the BPF Libbpf loader library is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
Astra Linux – Vulnerability in krb5
The vulnerability of the decodekrb5flags function in the asn1kencode.c component of the Kerberos authentication protocol is related to integer overflow. Exploiting this vulnerability allows a malicious actor to cause a service denial...