Multiple vulnerabilities in the security extension of the Astra Linux operating system, which allow a hacker to trigger a service failure.

The multiple vulnerabilities of the Astra Linux operating system’s security extension are related to incorrect handling of names for privacy levels that consist of digits. Additionally, there is no functionality for mounting removable devices when working with non-zero privacy flags. Exploitation...

The vulnerability of the fly-admin-mic utility in the Astra Linux operating system, which allows a intruder to cause a service failure

The vulnerability of the fly-admin-mic utility in the Astra Linux operating system is related to an incorrect interpretation of the operation to disable mandate integrity control. Exploiting this vulnerability can allow a perpetrator to cause a service failure...

The vulnerability of the iputils utility in the Astra Linux operating system, which allows a hacker to circumvent established access control rules

The vulnerability of the iputils utility in the Astra Linux operating system is related to the absence of a prohibition for using the -p option. Exploiting this vulnerability allows a remote attacker to circumvent established access control rules by sending data over the network within ICMP packe...

The vulnerability of Samba software on the Astra Linux operating system, which allows a hacker to trigger a service failure.

The vulnerability of Samba software on the Astra Linux operating system is related to the absence of the necessary privilege PARSECCAPSIG for the smbd process. Exploiting this vulnerability can allow a malicious actor to cause service interruptions. source-iocs-preserved const=PARSECCAPSIG...

The vulnerability of the fly-admin-dm graphical input configuration tool in the Astra Linux operating system allows a perpetrator to compromise the integrity and accessibility of protected data.

The vulnerability of the fly-admin-dm graphical input configuration tool in the Astra Linux operating system lies in the deletion of the original file when the copying of it to another partition is canceled. Exploiting this vulnerability allows a remote attacker to compromise the integrity and...

The vulnerability of the fly-admin-local package on the Astra Linux operating system allows a hacker to influence certain security policy rules.

The vulnerability of the fly-admin-local package in the Astra Linux operating system is related to an error in enabling the “kiosk” mode when the /etc/xdg/rusbitech file and the astra-console group are absent. Exploiting this vulnerability can allow a perpetrator to influence certain security...

The vulnerability of the ALD service in the Astra Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the ALD service in the Astra Linux operating system is related to an error that causes excessive network traffic generation. Exploiting this vulnerability allows a malicious actor to cause a failure in the slapd service or the entire system...

The vulnerability of the acpi-support package in the Astra Linux operating system allows a perpetrator to gain access to confidential data, thereby compromising the integrity and availability of that data.

The vulnerability of the acpi-support package in the Astra Linux operating system is related to the lack of support for hierarchical access control. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromising the integrity and availability of that data...

The vulnerability of the dbus package in the Astra Linux operating system allows a hacker to increase their privileges.

The vulnerability of the dbus package in the Astra Linux operating system relates to the ability for a root user with low integrity levels to access the session bus of a root user with high integrity levels. Exploiting this vulnerability could allow an attacker to enhance their privileges...

The vulnerability of the fly-admin-printer-mac utility in the Astra Linux operating system, which allows a hacker to gain access to confidential data

The vulnerability of the fly-admin-printer-mac utility in the Astra Linux operating system relates to the printing of content from the GECOS field instead of the user’s domain username. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

The vulnerability of the systemd daemon in the Astra Linux operating system allows a hacker to circumvent the restrictions imposed by a given security policy.

The vulnerability of the systemd-based Astra Linux operating system is related to the absence of mandate-based integrity control during operations involving systemd. Exploiting this vulnerability allows an attacker to circumvent the restrictions imposed by the specified security policies...

The vulnerability of the Vim text editor on the Astra Linux operating system allows a hacker to circumvent the restrictions imposed by the given security policy.

The vulnerability of the Vim text editor in the Astra Linux operating system is related to the improper saving of security attributes when files are modified. Exploiting this vulnerability allows an attacker to circumvent the security restrictions imposed by the specified security policy...

PT-2018-2332

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to a buffer overflow when copying a string with a command to invoke a virtual keyboard in the fly-qdm graphical login utility. Exploitation of this issue may allow an...

PT-2018-2329

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to the incorrect interpretation of the mandatory integrity control disable operation in the fly-admin-mic utility of Astra Linux. Exploitation of this issue may allow...

PT-2018-2337

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to the incorrect assignment of the mandatory integrity level when creating a user, allowing an attacker with privileged user rights to block access for newly created...

PT-2018-2318

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to the incorrect assignment of mandatory labels when creating a user in the Astra Linux operating system, specifically affecting the fly-admin-gmc graphical tool for...

PT-2018-2319

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to an error in the fly-admin-digsig package that leads to incorrect calculation of digital signatures for hidden files. This could allow an attacker to compromise the...

PT-2018-2334

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to the pam authentication module in Astra Linux, where domain users cannot obtain mandatory labels during authentication when the connection to the domain server is...

PT-2018-2336

Name of the Vulnerable Software and Affected Versions Astra Linux samba affected versions not specified Description The issue is related to the absence of the necessary PARSEC CAP SIG privilege in the smbd process. This could allow a remote attacker to cause a denial of service. Recommendations A...

PT-2018-2324

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to an error in assigning mandatory integrity attributes, which leads to an inability to access a user's home directory. When a user is created, their home directory i...