The vulnerability of the graphical security policy management utility fly-admin-smc on the Astra Linux operating system arises from the absence of a user list and verification during the creation of levels and categories. This allows users to violate the established security policies.

The vulnerability of the fly-admin-smc security policy management graphical utility on the Astra Linux operating system is related to the absence of a user list and verification during the creation of levels and categories. Exploiting this vulnerability could allow a hacker to violate the...

The vulnerability of the fly-admin-autostart utility for configuring automatic startup of programs in the Astra Linux operating system, related to pointer assignment errors, allows a hacker to trigger a service failure.

The vulnerability of the fly-admin-autostart utility for configuring automatic startup of programs in the Astra Linux operating system is related to the lack of checking for the value of a pointer being set to NULL. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the fly-admin-printer package allows unauthorized changes to the general access settings for printers on the Astra Linux operating system. This vulnerability enables a hacker to modify these settings without authorization.

The vulnerability of the fly-admin-printer package for configuring the printing system and printer options in the Astra Linux operating system is related to incorrect configuration of general access parameters. Exploiting this vulnerability may allow a malicious individual to unauthorizedly modif...

The vulnerability of the opensc authentication package for smart cards and system USB tokens in the Astra Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the opensc authentication package for smart cards and operating system USB tokens in Astra Linux is related to incorrect operation of the Rutek S drivers. Exploiting this vulnerability can allow a hacker to cause service failure...

The vulnerability of the component for integrating various authentication methods in the Astra Linux operating system allows a hacker to circumvent security policies set by the system, due to configuration errors in the password policies for user domain accounts.

The vulnerability of the component for integrating various authentication methods in the Astra Linux operating system is related to configuration errors in password policies, which result in the lack of checks to ensure that the specified restrictions on user domain account passwords are met...

The vulnerability of the graphical user input component in the fly-dm system of the Astra Linux operating system allows a intruder to unauthorizedly alter the level of session integrity.

The vulnerability of the graphical user input component in the fly-dm system of the Astra Linux operating system is related to an error that causes the fly-mac-dialog component to be executed without the required DBUSSESSIONBUSADDRESS=nothing option. This option is necessary for executing the dbu...

The vulnerability of the graphical user input component in the fly-qdm system of the Astra Linux operating system allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the graphical user input component in the fly-qdm system of the Astra Linux operating system is related to buffer overflows when copying a command string from the virtual keyboard. Exploiting this vulnerability can allow an attacker to cause service failures or execute...

The vulnerability of the window manager fly-wm component in the Astra Linux operating system allows a intruder to trigger a service failure.

The vulnerability of the window blocking component of the fly-wm operating system’s Astra Linux device lies in a flaw that causes the window blocking component to fail to execute, especially when the XGrabKeyboard call has already been made by another client. Exploiting this vulnerability could...

The vulnerability of the command-line tool astra-openvpn-server for configuring OpenVPN servers on the Astra Linux operating system stems from a configuration parameter interpretation error in the client software. This flaw allows an attacker to cause a service failure.

The vulnerability of the command-line tool astra-openvpn-server for configuring OpenVPN servers on the Astra Linux operating system is related to an interpretation error in the configuration parameters set for clients. Exploiting this vulnerability allows a malicious actor to cause service failur...

The vulnerability of the graphical configuration tool for “hot” device connections in the Astra Linux operating system allows a hacker to cause a service failure when multiple devices are connected simultaneously.

The vulnerability of the graphical configuration tool for hot-plug devices on the Astra Linux operating system is related to a file reading error that causes the inability to connect and mount the connected device. Exploiting this vulnerability can allow an attacker to cause service failures when...

The vulnerability of the component for integrating various authentication methods in the Astra Linux operating system arises from the use of unstable cryptographic hash functions for storing Unix passwords. This allows a hacker to gain unauthorized access to the system.

The vulnerability of the component for integrating various authentication methods in the Astra Linux operating system is related to the use of unstable cryptographic hash functions for storing Unix passwords. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the...

The vulnerability of the fly-admin-ntp package for managing NTP time services on the Astra Linux operating system allows a perpetrator to cause a service failure.

The vulnerability of the fly-admin-ntp package for managing NTP time services on the Astra Linux operating system is related to incorrect syntax analysis and processing of the configuration file. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the fly-admin-samba package for managing Samba network resources on the Astra Linux operating system allows a hacker to cause a service failure.

The vulnerability of the fly-admin-samba package for managing Samba network resources on the Astra Linux operating system is related to a conflict in the way the package interacts with the Astra Linux Directory Service ALD. Exploiting this vulnerability could allow a malicious actor to cause...

The vulnerability of the windowing system for building the graphical user interface of the xorg operating system in Astra Linux allows a hacker to alter the settings of the X-Session.

The vulnerability of the window system for creating a graphical user interface in the Astra Linux operating system’s xorg lies in an incorrect setting of the allow-user-xsession parameter in "/etc/X11/Xsession.options". Exploiting this vulnerability could allow a hacker to alter the default...

The vulnerability of the software dpkg, used for installing, removing, and retrieving information about deb-packages in the Astra Linux operating system, relates to a security feature that allows an attacker to compromise the integrity of the installed package.

The vulnerability in the dpkg software, which is used for installing, removing, and retrieving information about deb-packages in the Astra Linux operating system, relates to the verification of package integrity during installation. Exploiting this vulnerability allows a malicious actor to...

The vulnerability of the password generation and quality assessment library in Astra Linux’s operating system, libpam-pwquality, is related to a configuration error that allows an attacker to gain unauthorized access to the system.

The vulnerability of the password generation and quality assessment library in the Astra Linux operating system is related to a configuration error that causes no checks are performed to ensure that domain user passwords comply with the specified security policies. Exploiting this vulnerability...

The vulnerability of the fly-weather weather-checking package for the Astra Linux operating system allows a violator to trigger a service failure.

The vulnerability of the fly-weather weather-checking package for the Astra Linux operating system is related to an improper limitation on the buffer used for downloaded data. Exploiting this vulnerability could allow a hacker to cause a service failure...

The vulnerability of the libvirt virtualization management package in the Astra Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the libvirt virtualization management package in the Astra Linux operating system is related to the incorrect assignment of token labels to external file storage systems with integrity control tokens enabled. Exploiting this vulnerability could allow an attacker to cause a...

PT-2019-20266

Уязвимость инструмента командной строки astra-openvpn-server для настройки сервера OpenVPN операционной системы Astra Linux, связана с ошибкой интерпретации конфигурационных параметров, заданных для клиентов. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ...

PT-2019-20273

Уязвимость компоненты для интеграции различных методов аутентификации pam операционной системы Astra Linux связана с ошибками конфигурации политики паролей, приводящими к отсутствию проверки выполнения заданных ограничений для паролей доменных учетных записей пользователей. Эксплуатация уязвимост...