PT-2018-2324

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to an error in assigning mandatory integrity attributes, which leads to an inability to access a user's home directory. When a user is created, their home directory i...

PT-2018-19314

Уязвимость пакета сервиса администрирования fly-admin-service-se операционной системы Astra Linux связана с некорректной настройкой системы общей печати Common UNIX Printing System CUPS в Astra Linux Directory ALD. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать...

PT-2018-19311

Уязвимость пакета fly-admin-ntp для управления службой времени NTP операционной системы Astra Linux связана с некорректным синтаксическим анализом и обработкой файла конфигураций. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2018-2318

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to the incorrect assignment of mandatory labels when creating a user in the Astra Linux operating system, specifically affecting the fly-admin-gmc graphical tool for...

PT-2018-2326

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to the acpi-support package in Astra Linux, which lacks support for multi-level mandatory access control. This could allow an attacker to access confidential data,...

PT-2018-19322

Уязвимость пакета управления виртуализацией libvirt операционной системы Astra Linux связана с некорректным назначением мандатных меток на внешние файловые хранилища с включенным режимом мандатного контроля целостности МКЦ. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в...

PT-2018-19327

Уязвимость оконной системы для построения графического интерфейса пользователя xorg операционной системы Astra Linux связана с некорректным заданием параметра allow-user-xsession в «/etc/X11/Xsession.options». Эксплуатация уязвимости может позволить нарушителю изменить установленные параметры...

PT-2018-2329

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to the incorrect interpretation of the mandatory integrity control disable operation in the fly-admin-mic utility of Astra Linux. Exploitation of this issue may allow...

PT-2018-2338

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to the absence of mandatory integrity control in the systemd daemon of the Astra Linux operating system. This allows an attacker to bypass security policy restriction...

PT-2018-19321

Уязвимость библиотеки libparsec-mac-qt5 для разработки графических приложений с использованием библиотек графических интерфейсов Qt 5 операционной системы Astra Linux связана с ошибкой, приводящей к чрезмерной нагрузке при большом количестве доменных пользователей. Эксплуатация уязвимости может...

The vulnerability of the postgresql-common package in the Astra Linux operating system allows users to compromise data integrity.

The vulnerability of the postgresql-common package in the Astra Linux operating system is related to an error in the package update script, which causes a violation of the indexing of the list of installed deb packages in the operating system. Exploiting this vulnerability allows an attacker to...

The vulnerability of the Postgresql database management system in the Astra Linux operating system allows a perpetrator to gain access to confidential data and cause service interruptions.

The vulnerability of the Postgresql database management system in the Astra Linux operating system is related to an error in the interaction with LDAP via parsec calls when retrieving user security attributes. Exploiting this vulnerability allows a malicious actor to gain access to information...

The vulnerability of the libparsec-common-qt5 package on the Astra Linux operating system allows a hacker to access confidential data and trigger a service failure.

The vulnerability of the libparsec-common-qt5 package in the Astra Linux operating system is related to an error in the interaction with LDAP through parsec calls when retrieving user security attributes. Exploiting this vulnerability allows a remote attacker to gain access to information about a...

The vulnerability of the Fly-wm file manager in the Astra Linux operating system allows a hacker to gain unauthorized access to the user’s session, as well as to cause a service failure.

The vulnerability of the Fly-wm file manager in the Astra Linux operating system is related to an error that causes buffer overflows and unauthorized access to a locked user’s session when entering a specially crafted, large-length password. Additionally, there are security issues with the sumac...

The vulnerability of the Fly-admin-dm graphical input configuration tool for the Astra Linux operating system allows a perpetrator to access confidential data.

The vulnerability of the Fly-admin-dm graphical input configuration tool in the Astra Linux operating system is related to security vulnerabilities that allow the capture of screens containing graphical windows displaying confidential data. Exploiting this vulnerability could enable a malicious...

The vulnerability of the X Window System Xorg-server on the Astra Linux operating system allows a hacker to gain access to confidential data.

The vulnerability of the X Window System Xorg-server on the Astra Linux operating system is related to the lack of restrictions on the use of XungrabKeyboard and XgrabKeyboard functions for untrusted users, allowing the implementation of software tools with “keylogger” functionality. Exploiting...

The vulnerability of Astra Linux Directory service (ALD), a component of the Astra Linux operating system, allows a hacker to trigger a service failure.

The vulnerability of the Astra Linux Directory Service ALD in the Astra Linux operating system is related to an error in the command for accessing cache files of directory attributes. This error causes these files to be constantly recreated. Exploiting this vulnerability allows a malicious actor,...

PT-2018-19309

Уязвимость утилиты fly-admin-autostart для настройки автозапуска программ операционной системы Astra Linux связана с отсутствием проверки значения указателя на равенство NULL. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2018-2852

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to a memory deallocation error in the hwarc probe handler of the Astra Linux kernel, specifically in the drivers/uwb/hwa-rc.ko module. The error occurs when memory is...

PT-2018-2853

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to a memory deallocation error in the ems usb disconnect handler of the Astra Linux kernel. Specifically, in the ems usb probe function within the...