9470 matches found
Astra Linux – Vulnerability in tar
The vulnerability of the obstackbeginworker function in the obstack.c GNU Tar component is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause service failures...
Astra Linux – Vulnerability in Corosync
The vulnerability of the coroparse.c component in the Corosync cluster engine is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
Astra Linux – Vulnerability in Keepalived
The vulnerability of the parser.c component in the Keepalived network traffic balancing system is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to cause a service failure...
Astra Linux – Vulnerability in libvirt
The vulnerability of the virsocketaddr.c component in the Libvirt virtualization management library is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to cause a service failure remotely...
Astra Linux – Vulnerability in the 389-DS-base
A flaw was discovered in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server crash while sending a specific extended search request, resulting in a denial of service...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: drm/xe: The local fence was used in the error path of xemigrateclear. The purpose of the error path in xemigrateclear is to wait for the locally generated fence before returning. The code is waiting for m-fence, which could be th...
Astra Linux – Vulnerability in Chromium
A heap buffer overflow in V8 in Google Chrome prior to version 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
The use of “after free” in the Network component of Google Chrome before version 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption through a crafted web application. Chromium security severity: Medium...
Astra Linux – Vulnerability in Ruby-Rack
Rack provides an interface for developing web applications in Ruby. Before versions 2.2.13, 3.0.14, and 3.1.12, Rack::Static could serve files under the specified root: even if urls: was provided. This might lead to unexpected access to other files under the same root: directory. The vulnerabilit...
Astra Linux – Vulnerability in Intel Microcode
Improper access control in the EDECCSSA user leaf function for certain IntelR Processors with IntelR SGX may allow an authenticated user to potentially enable denial of service through local access...
Astra Linux – Vulnerability in Yelp
A flaw was discovered in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability enables malicious users to input help documents, which may result in the exfiltration of user files to an external environment...
Astra Linux – Vulnerability in Ruby 3.1
Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to versions 0.5.7, 0.4.20, 0.3.9, and 0.2.5, there was a possibility of a denial-of-service attack due to memory exhaustion when the net-imap component read server responses. At any time while the clien...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: iio: imu: stlsm6dsx: fixed a possible lock-up in stlsm6dsxreadfifo This issue prevents stlsm6dsxreadfifo from falling into an infinite loop in the case where patternlen is equal to zero, and when the device’s FIFO is not empty...
Astra Linux – Vulnerability in easy-rsa
The weak encryption algorithm in the Easy-RSA version 3.0.5 to 3.1.7 allows a local attacker to more easily brute-force the private CA key when it is created using OpenSSL 3...
Astra Linux – Vulnerability in Firefox, Thunderbird
An attacker was able to perform out-of-bounds read or write operations on a JavaScript object by misunderstanding the sizes of array indices. This vulnerability has been fixed in Firefox 138.0.4, Firefox ESR 128.10.1, Firefox ESR 115.23.1, Thunderbird 128.10.2, and Thunderbird 138.0.2...
Astra Linux – Vulnerability in Firefox, Thunderbird
An attacker was able to perform out-of-bounds read or write operations on a JavaScript Promise object. This vulnerability has been fixed in Firefox 138.0.4, Firefox ESR 128.10.1, Firefox ESR 115.23.1, Thunderbird 128.10.2, and Thunderbird 138.0.2...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: net: avoid race conditions between device unregistration and ethl operations. The following error can occur if a device is unregistered while its channel count is being modified: DEBUGLOCKSWARNONlock-magic != lock WARNING: CPU: 3...
Astra Linux – Vulnerability in Erlang
Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.1, OTP-26.2.5.10, and OTP-25.3.2.19, a maliciously formed KEX init message could result in high memory usage. The implementation does not verify the RFC specified limits on the length of algorithm nam...
Astra Linux - уязвимость в linux-5.10
In the Linux kernel, the following vulnerability has been resolved: iouring: abort file assignment prior to assigning creds We need to either restore creds properly if we fail on the file assignment, or just do the file assignment first instead. Let's do the latter as it's simpler, should make no...