406110 matches found
Astra Linux – vulnerability in gst-plugins-good1.0
GStreamer is a library for constructing graphs of media-handling components. An out-of-bounds read vulnerability has been found in the parseds64 function within gstwavparse.c. The parseds64 function fails to verify that the buffer buf contains sufficient data prior to attempting to read from it; ...
Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: ipv6: A BUG in pskbexpandhead as part of calipsoskbuffsetattr There exists a kernel oops caused by a BUGONnhead INTMAX i.e. int skbheadroomskb + lendelta skbheadroomskb is meant to ensure that delta = headroom - skbheadroomskb is...
Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/adm1266 bounce blackbox records through a protocol-sized buffer adm1266pmbusblockxfer copies the device-supplied block payload into the caller-provided buffer using the device-supplied length: memcpydatar, &msgs1.buf...
Astra Linux – Vulnerability in ffmpeg
There is a heap-based Buffer Overflow vulnerability in FFmpeg 4.2, located in the file libavfilter/vffloodfill.c. This vulnerability may lead to memory corruption and other potential issues...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerability has been resolved: bna: Ensure that the copied buffer is terminated with NUL characters. Currently, we allocate a kernel buffer of size nbytes and copy nbytes from user space to that buffer. Later, we use sscanf on this buffer, but we do not ensure...
Astra Linux – Vulnerability in exim4
Exim 4 before 4.94.2 allowed Buffer Underwrite, which could allow unauthenticated remote attackers to execute arbitrary commands. This is because smtpungetc was only intended for pushing back characters, but it can actually be used to push back non-character error codes, such as EOF...
Astra Linux – vulnerability in linux, linux-5.10
In the Linux kernel, the following vulnerability has been resolved: tty: ttybuffer: Fix the softlockup issue in flushtoldisc When running the ltp testcase ltp/testcases/kernel/pty/pty04.c on ARM64, a soft lockup occurs, as shown below: Workqueue: eventsunbound flushtoldisc Call trace:...
Astra Linux – vulnerability in linux, linux-5.10
In the Linux kernel, the following vulnerability has been resolved: IB/qib: Protect against buffer overflow in struct qibusersdmapkt fields Overflowing either addrlimit or bytestogo can allow userspace to trigger a buffer overflow of kernel memory. Check for overflows in all places where arithmet...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: net: stmmac: dwc-qos: Disable split header for Tegra194 There is a long-standing issue with the Synopsys DWC Ethernet driver for Tegra194, where random system crashes have been observed 0. The problem occurs when the split header...
Astra Linux - vulnerability in htmldoc
A stack-based buffer under-read in htmldoc prior to version 1.9.12 allows attackers to trigger a denial of service by sending a specially crafted BMP image to imageloadbmp...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: validate portcount against message length in t7xxportenummsghandler t7xxportenummsghandler uses the portcount field provided by the modem as an index into portmsg-data, without verifying that the message buffer...
Astra Linux – vulnerability in ffmpeg
A buffer overflow vulnerability exists in FFmpeg 4.2 in the configinput function at libavfilter/aftremolo.c; this could allow a remote malicious user to cause a Denial of Service...
Astra Linux – vulnerability in memcached
In memcached 1.5.16, when UNIX sockets are used, there is a stack-based buffer over-read in conntostr within memcached.c...
Astra Linux – vulnerability in mbedtls
An issue was found in Arm Mbed TLS prior to version 2.24.0. mbedtlsx509crlparseder contains a buffer over-read of one byte...
Astra Linux – Vulnerability in libxml-parser-perl
Versions of XML::Parser from 2.45 onwards for Perl may overflow the pre-allocated buffer size, leading to heap corruption double-free or corruption and crashes. The A:utf8 PerlIO layer, using the parsestream function in Expat.xs, may cause the XML input buffer to overflow. This is because Perl’s...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: misc: fastrpc: Fix for copy buffer page size For non-registered buffers, the fastrpc driver copies the buffer and passes it to the remote subsystem. There is a problem with the current implementation of page size calculation, ...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: smb: client: Added a check for nextbuffer in receiveencryptedstandard. Added a check on the return values of cifsbufget and cifssmallbufget in receiveencryptedstandard to prevent null pointer dereferencing...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: fou: Do not allow 0 for FOUATTRIPPROTO. The issue mentioned in the previous patch still exists in fouudprecv. If FOUATTRIPPROTO is set to 0, the buffer skb is neither freed by fouudprecv nor sent through ipprotocoldeliverrcu. Let...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate the virtual address and size of the userq buffer. It is necessary to validate the virtual address of the userq object to determine whether it is resident in a valid vm mapping...