PT-2020-22849

Уязвимость системы управления ЕПП службы Astra Linux Directory ALD связана с ошибкой обработки инициализации домена. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании...

The vulnerability of the fly-admin-int-check integrity control utility in the Astra Linux operating system, which allows a perpetrator to trigger a service failure.

The vulnerability of the fly-admin-int-check integrity control utility in the Astra Linux operating system is related to an unexpected termination of the program upon exit. Exploiting this vulnerability could allow a perpetrator to cause a service failure...

The vulnerability of the FreeIPA service component of the Astra Linux operating system allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the FreeIPA service component in the Astra Linux operating system is related to an error in processing the contents of file descriptors. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service failures...

The vulnerability of the NSS-LDAP operating system packages for Astra Linux and Debian GNU/Linux allows a hacker to obtain the server LDAP administrator password.

The vulnerability of the NSS-LDAP operating system packages for Astra Linux and Debian GNU/Linux is related to privilege management errors. Exploiting this vulnerability could allow a malicious individual to obtain the server LDAP administrator password...

PT-2019-20329

Уязвимость утилиты контроля целостности fly-admin-int-check операционной системы Astra Linux связана с аварийным завершением работы программы при выходе. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2019-20330

Уязвимость компоненты сервиса FreeIPA операционной системы Astra Linux связана с ошибкой при обработке содержания дескрипторов файла. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код или вызвать отказ в обслуживании...

The vulnerability of the fly-hexedit component in the FLY operating environment of the Astra Linux system allows a perpetrator to compromise data integrity.

The vulnerability of the fly-hexedit component in the FLY environment of the Astra Linux operating system is related to file corruption when saving files with the same name. Exploiting this vulnerability can allow an attacker to compromise data integrity...

The vulnerability of the solid utility function in the Astra Linux operating system, which allows a hacker to trigger a service failure.

The vulnerability of the solid utility function in the Astra Linux operating system is related to the incorrect display of information on unmounted flash drives. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the xca utility in the Astra Linux operating system, which allows a intruder to trigger a service failure

The vulnerability of the xca utility in the Astra Linux operating system is related to a bug that causes the program to terminate abnormally when a dialog window is closed. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the fly-admin-samba component in the FLY operating system environment of Astra Linux allows a hacker to trigger a service failure.

The vulnerability of the fly-admin-samba component in the FLY operating environment of the Astra Linux system is related to an error that causes an emergency restart of the mnbd service when the name of the user group is changed. Exploiting this vulnerability allows a remote attacker to cause a...

The vulnerability of the fly-start-panel component in the FLY operating system environment of the Astra Linux system allows a intruder to gain unauthorized access to protected information.

The vulnerability of the fly-start-panel component in the FLY operating system environment of the Astra Linux system is related to the ability to switch to a higher level in the file system through the “Start Menu” and file manager programs. Exploiting this vulnerability can allow an intruder to...

The vulnerability of the ktexteditor text editing tool in the Astra Linux operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the ktexteditor text editing tool in the Astra Linux operating system is related to errors in interpreting file access rights. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

The vulnerability of the fly-admin-viewaudit security journal in the FLY environment of the Astra Linux operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the security journal “fly-admin-viewaudit” in the FLY operating system of Astra Linux relates to a bug in log opening with identical modification times. Exploiting this vulnerability could allow an attacker, working remotely, to gain unauthorized access to protected informati...

The vulnerability of the fly-qdm component in the FLY operating system of Astra Linux allows a hacker to trigger a maintenance failure.

The vulnerability of the fly-qdm component in the FLY operating environment of the Astra Linux system is related to buffer overflows during the copying of lines of commands from the virtual keyboard. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the powerdevil utility in the Astra Linux operating system, which allows a hacker to trigger a service failure.

The vulnerability of the powerdevil utility in the Astra Linux operating system is related to errors in processing the power button press after the monitor exits sleep mode, resulting in incorrect positioning of interface elements. Exploiting this vulnerability can allow an intruder to cause a...

The vulnerability of the printcontrol-web utility in the Astra Linux operating system, which allows a intruder to trigger a service failure.

The vulnerability of the printcontrol-web utility in the Astra Linux operating system is related to data interpretation errors during card filling. Exploiting this vulnerability can allow a perpetrator to cause service failures...

The vulnerability of the fly-admin-security-monitor component in the FLY operating system environment of the Astra Linux platform allows a perpetrator to compromise data integrity, gain unauthorized access to protected information, and cause service interruptions.

The vulnerability of the fly-admin-security-monitor component in the FLY operating environment of the Astra Linux system is related to the absence of blocking mechanisms for system commands, as well as the absence of a configuration status for the closed-programming-environment security system...

The vulnerability of the fly-wm component in the FLY operating system of the Astra Linux platform allows a perpetrator to gain unauthorized access to protected information or cause service failures.

The vulnerability of the fly-wm component in the FLY operating system of Astra Linux relates to the inability to successfully execute the lock mechanism. Exploiting this vulnerability may allow an attacker, working remotely, to gain unauthorized access to protected information or cause service...

The vulnerability of the libparsec-mac-qt5 library, used for developing graphical applications with Qt5 graphical interfaces on the Astra Linux operating system, allows a hacker to cause a service failure.

The vulnerability of the libparsec-mac-qt5 library for developing graphical applications using Qt5 graphical interfaces on the Astra Linux operating system is related to errors that lead to multiple accesses to the macdb memory area. Exploiting this vulnerability can allow an attacker to cause a...

The vulnerability of the Astra Linux operating system’s parser library, which allows a hacker to trigger a service failure.

The vulnerability of the Astra Linux operating system’s parser library is related to incorrect handling of the configuration file. Exploiting this vulnerability can allow an attacker to cause a service failure...