The vulnerability of the Fly-wm file manager in the Astra Linux operating system allows a hacker to gain unauthorized access to the user’s session, as well as to cause a service failure.

The vulnerability of the Fly-wm file manager in the Astra Linux operating system is related to an error that causes buffer overflows and unauthorized access to a locked user’s session when entering a specially crafted, large-length password. Additionally, there are security issues with the sumac...

The vulnerability of the X Window System Xorg-server on the Astra Linux operating system allows a hacker to gain access to confidential data.

The vulnerability of the X Window System Xorg-server on the Astra Linux operating system is related to the lack of restrictions on the use of XungrabKeyboard and XgrabKeyboard functions for untrusted users, allowing the implementation of software tools with “keylogger” functionality. Exploiting...

The vulnerability of Astra Linux Directory service (ALD), a component of the Astra Linux operating system, allows a hacker to trigger a service failure.

The vulnerability of the Astra Linux Directory Service ALD in the Astra Linux operating system is related to an error in the command for accessing cache files of directory attributes. This error causes these files to be constantly recreated. Exploiting this vulnerability allows a malicious actor,...

The vulnerability of the Fly-admin-dm graphical input configuration tool for the Astra Linux operating system allows a perpetrator to access confidential data.

The vulnerability of the Fly-admin-dm graphical input configuration tool in the Astra Linux operating system is related to security vulnerabilities that allow the capture of screens containing graphical windows displaying confidential data. Exploiting this vulnerability could enable a malicious...

The vulnerability of the postgresql-common package in the Astra Linux operating system allows users to compromise data integrity.

The vulnerability of the postgresql-common package in the Astra Linux operating system is related to an error in the package update script, which causes a violation of the indexing of the list of installed deb packages in the operating system. Exploiting this vulnerability allows an attacker to...

The vulnerability of the Postgresql database management system in the Astra Linux operating system allows a perpetrator to gain access to confidential data and cause service interruptions.

The vulnerability of the Postgresql database management system in the Astra Linux operating system is related to an error in the interaction with LDAP via parsec calls when retrieving user security attributes. Exploiting this vulnerability allows a malicious actor to gain access to information...

PT-2018-19309

Уязвимость утилиты fly-admin-autostart для настройки автозапуска программ операционной системы Astra Linux связана с отсутствием проверки значения указателя на равенство NULL. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2018-2853

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to a memory deallocation error in the ems usb disconnect handler of the Astra Linux kernel. Specifically, in the ems usb probe function within the...

PT-2018-2855

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to a memory deallocation error in the dc395x interrupt handler of the Astra Linux kernel, specifically in the find dcb function called from the dc395x interrupt...

PT-2018-2854

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to a memory deallocation error in the ddb open handler implementation in the Astra Linux kernel, specifically in the ddbridge.ko module. The error occurs in the ddb...

PT-2018-2851

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to a memory leak in the virtio pci remove handler of the Astra Linux kernel loadable module drivers/virtio/virtio pci.ko. The problem arises from the allocation of...

PT-2018-2852

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to a memory deallocation error in the hwarc probe handler of the Astra Linux kernel, specifically in the drivers/uwb/hwa-rc.ko module. The error occurs when memory is...

PT-2018-1985

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to an error in the postgresql-common package update script, which leads to a disruption in the indexing of installed deb-packages in the operating system. This can be...

PT-2018-1987

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to an error in assigning access rights to cache files of mandatory attributes in the Astra Linux Directory ALD service of the Astra Linux operating system, leading to...

PT-2018-1988

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to an error in the interaction with LDAP through parsec-calls when receiving user security attributes. This allows a remote attacker to gain access to information abo...

PT-2018-1982

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to a buffer overflow error in the file manager of Astra Linux, which can lead to unauthorized access to a locked user session when a specially crafted large string is...

PT-2018-1984

Name of the Vulnerable Software and Affected Versions Astra Linux X Window System Xorg-server affected versions not specified Description The issue is related to the lack of restriction on the use of XungrabKeyboard and XgrabKeyboard functions for untrusted users, allowing the implementation of...

PT-2018-1983

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to errors in the security subsystem of the Fly-admin-dm utility in Astra Linux, allowing an attacker to capture screenshots of graphical windows containing confidenti...

astra-arms.ch XSS vulnerability

Open Bug Bounty ID: OBB-667641 Description| Value ---|--- Affected Website:| astra-arms.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PT-2018-2869

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to an input validation error in the fly-weather software package, which can be exploited to conduct spoofing attacks. Recommendations At the moment, there is no...