PT-2018-2326

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to the acpi-support package in Astra Linux, which lacks support for multi-level mandatory access control. This could allow an attacker to access confidential data,...

PT-2018-2328

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue in Astra Linux's dbus package is related to the possibility of a root user with low integrity level connecting to the session bus of a root user with high integrity level. This...

PT-2018-2329

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to the incorrect interpretation of the mandatory integrity control disable operation in the fly-admin-mic utility of Astra Linux. Exploitation of this issue may allow...

PT-2018-2333

Name of the Vulnerable Software and Affected Versions Astra Linux iputils affected versions not specified Description The issue is related to the iputils utility in Astra Linux, which lacks a restriction on using the -p option. This could allow a remote attacker to bypass access control rules by...

PT-2018-2331

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to the fly-admin-dm utility in Astra Linux, where the original file is deleted when its copying to another partition is cancelled. This could allow a remote attacker ...

PT-2018-2330

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to the fly-admin-printer-mac utility in Astra Linux, which incorrectly prints the contents of the GECOS field instead of the domain login of the user. This could allo...

PT-2018-2332

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to a buffer overflow when copying a string with a command to invoke a virtual keyboard in the fly-qdm graphical login utility. Exploitation of this issue may allow an...

PT-2018-2335

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to multiple security vulnerabilities in the parsec security extension of Astra Linux. These vulnerabilities are caused by incorrect handling of confidentiality level...

PT-2018-2337

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to the incorrect assignment of the mandatory integrity level when creating a user, allowing an attacker with privileged user rights to block access for newly created...

PT-2018-2336

Name of the Vulnerable Software and Affected Versions Astra Linux samba affected versions not specified Description The issue is related to the absence of the necessary PARSEC CAP SIG privilege in the smbd process. This could allow a remote attacker to cause a denial of service. Recommendations A...

PT-2018-2338

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to the absence of mandatory integrity control in the systemd daemon of the Astra Linux operating system. This allows an attacker to bypass security policy restriction...

PT-2018-2339

Name of the Vulnerable Software and Affected Versions vim affected versions not specified Description The issue is related to the incorrect preservation of security attributes when modifying files in the vim text editor on Astra Linux operating system. This allows an attacker to bypass the...

PT-2018-19315

Уязвимость компоненты графического входа пользователя в систему fly-dm операционной системы Astra Linux связана с ошибкой, приводящей к сбою при выполнении команды "fly-dmctl rtcwake" без указания аргументов "-t/-s secs". Эксплуатация уязвимости может позволить нарушителю вызвать отказ в...

PT-2018-19321

Уязвимость библиотеки libparsec-mac-qt5 для разработки графических приложений с использованием библиотек графических интерфейсов Qt 5 операционной системы Astra Linux связана с ошибкой, приводящей к чрезмерной нагрузке при большом количестве доменных пользователей. Эксплуатация уязвимости может...

PT-2018-2321

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to an error in assigning access rights to the cache of mandatory labels for certain services in the ALD security extension of the Astra Linux operating system. This...

PT-2018-2320

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to an error in activating the "kiosk" mode in the fly-admin-local package when the /etc/xdg/rusbitech file and the astra-console group are missing. This could allow a...

PT-2018-19314

Уязвимость пакета сервиса администрирования fly-admin-service-se операционной системы Astra Linux связана с некорректной настройкой системы общей печати Common UNIX Printing System CUPS в Astra Linux Directory ALD. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать...

PT-2018-2334

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to the pam authentication module in Astra Linux, where domain users cannot obtain mandatory labels during authentication when the connection to the domain server is...

PT-2018-19312

Уязвимость пакета fly-admin-printer для настройки системы печати и опций принтера операционной системы Astra Linux связана с некорректной настройкой параметров общего доступа. Эксплуатация уязвимости может позволить нарушителю несанкционированно изменить настройки общего доступа к принтерам...

PT-2018-19317

Уязвимость компоненты графического входа пользователя в систему fly-dm операционной системы Astra Linux связана с ошибкой, приводящей к запуску компоненты fly-mac-dialog без опции DBUS SESSION BUS ADDRESS=nothing, необходимой для запуска демона dbus с высоким уровнем целостности. Эксплуатация...