PT-2018-19313

Уязвимость пакета fly-admin-samba для администрирования сетевых ресурсов Samba операционной системы Astra Linux связана с конфликтом совместной работы пакета со службой Astra Linux Directory ALD. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживан...

PT-2018-19323

Уязвимость пакета linux-astra-modules операционной системы Astra Linux связана с ошибкой, приводящей к утечке информации через утилиту для считывания/установки ограничений prlimit. Эксплуатация уязвимости может позволить нарушителю получить несанкционированный доступ к данным...

PT-2018-19318

Уязвимость компоненты графического входа пользователя в систему fly-qdm операционной системы Astra Linux связана с переполнением буфера при копировании строки с командой вызова виртуальной клавиатуры. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании или выполнить...

PT-2018-19324

Уязвимость пакета linux-astra-modules операционной системы Astra Linux связана с ошибкой назначения прав доступа, приводящей к возможности обхода замкнутой программной среды ЗПС через запись в /proc/$PID/mem. Эксплуатация уязвимости может позволить нарушителю обойти заданные правила политики...

PT-2018-2323

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to an error in the sssd service, which manages access to remote directories and authentication mechanisms in Astra Linux. This error prevents domain users from...

The vulnerability of the Fly-wm file manager in the Astra Linux operating system allows a hacker to gain unauthorized access to the user’s session, as well as to cause a service failure.

The vulnerability of the Fly-wm file manager in the Astra Linux operating system is related to an error that causes buffer overflows and unauthorized access to a locked user’s session when entering a specially crafted, large-length password. Additionally, there are security issues with the sumac...

The vulnerability of the X Window System Xorg-server on the Astra Linux operating system allows a hacker to gain access to confidential data.

The vulnerability of the X Window System Xorg-server on the Astra Linux operating system is related to the lack of restrictions on the use of XungrabKeyboard and XgrabKeyboard functions for untrusted users, allowing the implementation of software tools with “keylogger” functionality. Exploiting...

The vulnerability of the postgresql-common package in the Astra Linux operating system allows users to compromise data integrity.

The vulnerability of the postgresql-common package in the Astra Linux operating system is related to an error in the package update script, which causes a violation of the indexing of the list of installed deb packages in the operating system. Exploiting this vulnerability allows an attacker to...

The vulnerability of Astra Linux Directory service (ALD), a component of the Astra Linux operating system, allows a hacker to trigger a service failure.

The vulnerability of the Astra Linux Directory Service ALD in the Astra Linux operating system is related to an error in the command for accessing cache files of directory attributes. This error causes these files to be constantly recreated. Exploiting this vulnerability allows a malicious actor,...

The vulnerability of the libparsec-common-qt5 package on the Astra Linux operating system allows a hacker to access confidential data and trigger a service failure.

The vulnerability of the libparsec-common-qt5 package in the Astra Linux operating system is related to an error in the interaction with LDAP through parsec calls when retrieving user security attributes. Exploiting this vulnerability allows a remote attacker to gain access to information about a...

The vulnerability of the Postgresql database management system in the Astra Linux operating system allows a perpetrator to gain access to confidential data and cause service interruptions.

The vulnerability of the Postgresql database management system in the Astra Linux operating system is related to an error in the interaction with LDAP via parsec calls when retrieving user security attributes. Exploiting this vulnerability allows a malicious actor to gain access to information...

The vulnerability of the Fly-admin-dm graphical input configuration tool for the Astra Linux operating system allows a perpetrator to access confidential data.

The vulnerability of the Fly-admin-dm graphical input configuration tool in the Astra Linux operating system is related to security vulnerabilities that allow the capture of screens containing graphical windows displaying confidential data. Exploiting this vulnerability could enable a malicious...

PT-2018-19309

Уязвимость утилиты fly-admin-autostart для настройки автозапуска программ операционной системы Astra Linux связана с отсутствием проверки значения указателя на равенство NULL. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2018-2853

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to a memory deallocation error in the ems usb disconnect handler of the Astra Linux kernel. Specifically, in the ems usb probe function within the...

PT-2018-2855

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to a memory deallocation error in the dc395x interrupt handler of the Astra Linux kernel, specifically in the find dcb function called from the dc395x interrupt...

PT-2018-2854

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to a memory deallocation error in the ddb open handler implementation in the Astra Linux kernel, specifically in the ddbridge.ko module. The error occurs in the ddb...

PT-2018-2851

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to a memory leak in the virtio pci remove handler of the Astra Linux kernel loadable module drivers/virtio/virtio pci.ko. The problem arises from the allocation of...

PT-2018-2852

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to a memory deallocation error in the hwarc probe handler of the Astra Linux kernel, specifically in the drivers/uwb/hwa-rc.ko module. The error occurs when memory is...

PT-2018-1987

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to an error in assigning access rights to cache files of mandatory attributes in the Astra Linux Directory ALD service of the Astra Linux operating system, leading to...

PT-2018-1985

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to an error in the postgresql-common package update script, which leads to a disruption in the indexing of installed deb-packages in the operating system. This can be...