Astra Linux – Vulnerability in libvncserver

LibVNCClient is a library for easy implementation of a VNC client. In versions 0.9.15 and earlier, LibVNCClient’s Tight encoding decoder used fixed-size 2048-pixel scratch buffers for the Gradient filter. However, it did not reject Tight rectangles whose width exceeded 2048 pixels. A malicious VN...

Astra Linux – Vulnerability in virglrenderer

A out-of-bounds write issue was discovered in the VirGL virtual OpenGL renderer virglrenderer. This flaw allows a malicious attacker to create a specially crafted virgil resource, then issue a VIRTGPUEXECBUFFER ioctl command, resulting in a denial of service or potential code execution...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: iavf: Fixed an out-of-bounds situation when setting channels during iavfremove. If the channels are set to a value greater than what is actually allocated, it will cause a timeout, and an error will be returned. However, the...

Astra Linux – Vulnerability in Linux, Linux 5.10

The file net/netfilter/nfdupnetdev.c in the Linux kernel versions 5.4 through 5.6.10 allows local users to gain privileges due to a heap-out-of-bounds write. This issue is related to the nftablesoffload mechanism...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fixed an out-of-bounds access in rpage. When PAGESIZE is 64K, if logreadrst calls readlogpage for the first time, the size of buffer will be equal to DefaultLogPageSize4K. However, for buffer operations like memcpy, if...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: uprobe: avoided out-of-bounds memory access when fetching args Uprobe needs to fetch args into a percpu buffer, and then copy them to the ring buffer to avoid non-atomic context problems. Sometimes user-space strings or arrays ca...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

A problem with out-of-bound reading was detected in brcmfmac/cfg80211.c within the drivers/net/wireless/broadcom/brcm80211 directory of the Linux kernel. This issue can occur when the associnfo-reqlen data is larger than the size of the buffer, which is defined as WLEXTRABUFMAX, resulting in a...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: scsi: megaraidsas: Fixed an invalid node index issue. On systems with DRAM interleave enabled, out-of-bound access was detected: megaraidsas 0000:3f:00.0: Requested/available msix 128/128 pollqueue 0 ------------ Cut here...

Astra Linux – Vulnerabilities in Linux, Linux-5.15, Linux-5.10

In the Linux kernel, the following vulnerability has been resolved: media: av7110: prevent underflow in writetstodecoder The value of buf4 comes from the user via tsplay. This value is within the u8 range. The final length that we pass to av7110ipackinstantrepack is “len – buf4 + 1 – 4”. Therefor...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Squashfs: check the return result of sbminblocksize Syzkaller reports a bug named “UBSAN: shift-out-of-bounds in squashfsbioread”. Syzkaller forks multiple processes. After mounting the Squashfs filesystem, it issues an...

Astra Linux – Vulnerability in htmldoc

A vulnerability was discovered in htmldoc version 1.9.15. This vulnerability occurs in the gifgetcode function, where an out-of-bounds stack read operation takes place. The vulnerability manifests itself when opening a malicious GIF file, potentially leading to a crash segmentation fault...

Astra Linux – Vulnerability in Chromium

The out-of-bounds reading in ANGLE in Google Chrome prior to version 111.0.5563.110 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Qemu

A flaw was discovered in the QEMU implementation of VMWare’s paravirtual RDMA device. This flaw allows a malicious guest driver to allocate and initialize a large number of page tables, which can be used as a ring of descriptors for CQ and async events. This could potentially lead to out-of-bound...

Astra Linux – Vulnerability in Chromium

In Dawn, a vulnerability was identified before version 104.0.5112.79: a remote attacker could potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in Linux 5.10

A flaw was discovered in the Linux kernel, specifically in the linux/net/netfilter/nftablesapi.c file of the netfilter subsystem. This flaw allows a local user to cause an out-of-bounds write issue...

Astra Linux – Vulnerability in Qemu

A out-of-bounds write vulnerability was discovered in the virtio vhost-user GPU device vhost-user-gpu of QEMU in versions up to and including 6.0. This flaw occurs during the processing of the ‘VIRTIOGPUCMDGETCAPSET’ command from the guest. It could allow a privileged guest user to crash the QEMU...

Astra Linux – Vulnerability in Chromium

The out-of-bounds write-in ANGLE feature in Google Chrome, as of version 148.0.7778.216, allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackh323: Fixed an issue where an OOB read was performed in the decodeint function during the CONS case. In decodeint, the CONS case calls getbitsbs, 2 to read a length value. Then, it calls getuintbs, len witho...

Astra Linux – Vulnerability in libxpm

A vulnerability was discovered in libXpm, where a boundary condition allows a local user to trigger an out-of-bounds read error, thereby reading contents of memory on the system...

Astra Linux – Vulnerability in gst-plugins-good1.0

GStreamer is a library for constructing graphs of media-handling components. A OOB-read vulnerability has been identified in the gstwavparsesmplchunk function within gstwavparse.c. This function attempts to read 4 bytes from the data + 12 offset without checking if the size of the data buffer is...