The vulnerability of the component for implementing remote access to the desktop based on the VNC protocol in the Astra Linux operating system, related to the incorrect use of flags during compilation, allows a hacker to trigger a service failure.

The vulnerability of the component for implementing remote access to the desktop based on the VNC protocol in the Astra Linux operating system is related to the incorrect use of flags during compilation. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

The vulnerability of the fly-admin-ntp package for managing NTP time services on the Astra Linux operating system allows a perpetrator to cause a service failure.

The vulnerability of the fly-admin-ntp package for managing NTP time services on the Astra Linux operating system is related to incorrect syntax analysis and processing of the configuration file. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the fly-admin-printer package allows unauthorized changes to the general access settings for printers on the Astra Linux operating system. This vulnerability enables a hacker to modify these settings without authorization.

The vulnerability of the fly-admin-printer package for configuring the printing system and printer options in the Astra Linux operating system is related to incorrect configuration of general access parameters. Exploiting this vulnerability may allow a malicious individual to unauthorizedly modif...

The vulnerability of the fly-admin-samba package for managing Samba network resources on the Astra Linux operating system allows a hacker to cause a service failure.

The vulnerability of the fly-admin-samba package for managing Samba network resources on the Astra Linux operating system is related to a conflict in the way the package interacts with the Astra Linux Directory Service ALD. Exploiting this vulnerability could allow a malicious actor to cause...

The vulnerability of the fly-admin-service-se administrative service package for the Astra Linux operating system allows a perpetrator to cause a failure in the printing service.

The vulnerability of the fly-admin-service-se administrative service package for the Astra Linux operating system is related to incorrect configuration of the Common UNIX Printing System CUPS in the Astra Linux Directory ALD. Exploiting this vulnerability could allow a malicious actor to cause...

The vulnerability of the graphical user input component in the fly-dm operating system of Astra Linux allows a hacker to cause a service failure.

The vulnerability of the graphical user input component in the fly-dm operating system of Astra Linux is related to an error that causes a failure when executing the “fly-dmctl rtcwake” command without specifying the arguments “-t/-s secs”. Exploiting this vulnerability could allow a perpetrator ...

The vulnerability of the graphical user input component in the fly-dm operating system of Astra Linux allows a hacker to execute arbitrary code.

The vulnerability of the graphical user interface component in the fly-dm system of the Astra Linux operating system is related to an error that allows control over the systemd daemon by generating commands like “fly-dmctl suspendtohyibernate-p”, which execute the command “systemctl -p...

The vulnerability of the graphical user input component in the fly-dm system of the Astra Linux operating system allows a intruder to unauthorizedly alter the level of session integrity.

The vulnerability of the graphical user input component in the fly-dm system of the Astra Linux operating system is related to an error that causes the fly-mac-dialog component to be executed without the required DBUSSESSIONBUSADDRESS=nothing option. This option is necessary for executing the dbu...

The vulnerability of the window manager fly-wm component in the Astra Linux operating system allows a intruder to trigger a service failure.

The vulnerability of the window blocking component of the fly-wm operating system’s Astra Linux device lies in a flaw that causes the window blocking component to fail to execute, especially when the XGrabKeyboard call has already been made by another client. Exploiting this vulnerability could...

The vulnerability of the libparsec-mac-qt5 library, used for developing graphical applications with Qt 5 graphical interfaces on the Astra Linux operating system, allows a hacker to cause a service failure.

The vulnerability of the libparsec-mac-qt5 library for developing graphical applications using Qt 5 graphical interfaces on the Astra Linux operating system is related to a flaw that causes excessive load when there are a large number of domain users. Exploiting this vulnerability may allow a...

The vulnerability of the linux-astra-modules package of the Astra Linux operating system allows a hacker to gain unauthorized access to data.

The vulnerability of the linux-astra-modules package in the Astra Linux operating system is related to an error that causes information leakage through the prlimit utility for reading/setting limit values. Exploiting this vulnerability can allow a perpetrator to gain unauthorized access to data...

The vulnerability of the linux-astra-modules package of the Astra Linux operating system, which allows a hacker to circumvent established security policy rules

The vulnerability of the linux-astra-modules package in the Astra Linux operating system is related to an access control permission assignment error, which allows for bypassing the closed software environment by writing to /proc/$PID/mem. Exploiting this vulnerability can enable a perpetrator to...

The vulnerability of the windowing system for building the graphical user interface of the xorg operating system in Astra Linux allows a hacker to alter the settings of the X-Session.

The vulnerability of the window system for creating a graphical user interface in the Astra Linux operating system’s xorg lies in an incorrect setting of the allow-user-xsession parameter in "/etc/X11/Xsession.options". Exploiting this vulnerability could allow a hacker to alter the default...

The vulnerability of the tool for adjusting mandate attributes of Astra Linux objects allows a hacker to circumvent the specified security policy restrictions.

The vulnerability of the “correction of mandate attributes” utility in the astrase-fix-maildir object of the Astra Linux operating system is related to an error in assigning the ehole tag to the dovecot-uidlist file, which stores the “UID filename” pair. Exploiting this vulnerability can allow a...

The vulnerability of the command-line tool astra-openvpn-server for configuring OpenVPN servers on the Astra Linux operating system stems from a configuration parameter interpretation error in the client software. This flaw allows an attacker to cause a service failure.

The vulnerability of the command-line tool astra-openvpn-server for configuring OpenVPN servers on the Astra Linux operating system is related to an interpretation error in the configuration parameters set for clients. Exploiting this vulnerability allows a malicious actor to cause service failur...

PT-2019-20266

Уязвимость инструмента командной строки astra-openvpn-server для настройки сервера OpenVPN операционной системы Astra Linux, связана с ошибкой интерпретации конфигурационных параметров, заданных для клиентов. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ...

PT-2019-20274

Уязвимость компоненты для интеграции различных методов аутентификации pam операционной системы Astra Linux связана с применением нестойких криптографических хеш-функций для хранения unix-паролей. Эксплуатация уязвимости может позволить нарушителю получить несанкционированный доступ к системе...

PT-2019-20272

Уязвимость библиотеки для генерации паролей и оценки их качества libpam-pwquality операционной системы Astra Linux связана с ошибкой конфигурации, приводящей к отсутствию проверки паролей доменных пользователей на соответствие заданной политике безопасности. Эксплуатация уязвимости может позволит...

PT-2019-20268

Уязвимость графической утилиты управления политикой безопасности fly-admin-smc операционной системы Astra Linux связана с отсутствием списка пользователей и проверки при создании уровней и категорий. Эксплуатация уязвимости может позволить нарушителю нарушить заданные правила политики безопасност...

PT-2019-20269

Уязвимость графической утилиты работы с журналом безопасности fly-admin-viewaudit операционной системы Astra Linux связана с попыткой обращения к недоступным участкам памяти. Эксплуатация уязвимости может позволить нарушителю получить несанкционированный доступ к информации...