Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: udmabuf: fixed an overflow issue related to the buffer size during the creation of udmabuf. By casting sizelimitmb as a 64-bit value when calculating pglimit...

Astra Linux – Vulnerability in Redis

Redis is an open-source, in-memory database that persists data on disk. When using the Redis Lua Debugger, users can send malformed requests, causing the debugger’s protocol parser to read data beyond the actual buffer. This issue affects all versions of Redis with Lua debugging support 3.2 or...

Astra Linux – Vulnerability in glibc

The iconv feature in the GNU C Library also known as glibc or libc6, up to version 2.32, may have a buffer over-read issue when processing invalid multi-byte input sequences in the EUC-KR encoding...

Astra Linux – Vulnerability in Freetype

It was discovered that the FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f contains a heap buffer overflow issue through the sfntinitface function...

Astra Linux – Vulnerability in atftp

In tftpdfile.c in atftp up to 0.7.4, there is a buffer overflow issue due to improper handling of buffer-size parameters, which does not correctly account for combinations of data, OACK, and other options...

Astra Linux – Vulnerability in Linux

A buffer overflow at the framebuffer layer in the fbcon code within the Linux kernel, prior to version 5.8.15, could be exploited by local attackers to read kernel memory, referred to as CID-6735b4632def...

Astra Linux – Vulnerability in libxml2

In libxml2 versions before 2.9.14, several buffer handling functions in buf.c xmlBuf and tree.c xmlBuffer do not check for integer overflows. This can lead to out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software that uses libxml2’s...

Astra Linux – vulnerability in bind9

In BIND versions 9.5.0 through 9.11.29, 9.12.0 through 9.16.13, as well as versions 9.11.3-S1 through 9.11.29-S1 and 9.16.8-S1 through 9.16.13-S1 from the BIND Supported Preview Edition, and release versions 9.17.0 through 9.17.1 from the BIND 9.17 development branch, BIND servers are vulnerable ...

Astra Linux – Vulnerabilities in Linux, Linux-5.15, Linux-5.10, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb frags The MSGSPLICEPAGES function can attach pages from a pipe directly to an skb. TCP marks such skbs with SKBFLSHAREDFRAG after skbsplicefromiter, so later processes that may modi...

Astra Linux – Vulnerability in ffmpeg

There is a heap-based Buffer Overflow vulnerability in gaussianblur at libavfilter/vfedgedetect.c, which may lead to memory corruption and other potential issues...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/i915/hdcp: check streams bounds before overflow The check for data-streams overflow is performed after a buffer overflow has already occurred. Move the overflow check to before writing the data. By the way, issuing a warning...

Astra Linux – Vulnerability in Squid

Squid is a caching proxy for the Web. Prior to version 7.6, due to an improper input validation bug in cache digest reply handling specifically, the peerDigestSwapInMask function in src/peerdigest.cc, Squid was vulnerable to a heap-based buffer overflow. The on-the-wire size of a cache digest mig...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fixed a potential buffer overflow in ‘dpdscclockenread’. Inform snprintf to store at most 10 bytes in the output buffer instead of 30. The issue has been fixed in the following file:...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: jfs: xattr: fixed buffer overflow for invalid xattr values. When the xattr size is not as expected, it is printed out to the kernel log in hexadecimal format as a form of debugging. However, when that xattr size is larger than...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: “Reapply ‘drm/qxl: simplify qxlfencewait’” This change reverts the commit 07ed11afb68d94eadd4ffc082b97c2331307c5ea. Stephen Rostedt reported: “I tried running my tests on my virtual machines, but the tests failed upon boot-up...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: drm/amd/display: Fixed NULL dereference and buffer over-reading in SDP debugfs Why & How The function dpsdpmessagedebugfswrite dereferences connector-base.state-crtc without checking for NULL. A connector may be connected but...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Drop the channel lock before queuing buffers. Ensure that read and write locks for the channel are not acquired consecutively by dropping the read lock from parsexferevent. This allows a callback provided to the...

Astra Linux – Vulnerability in freerdp3

Versions of FreeRDP prior to 3.31.0 contain a heap buffer overflow vulnerability in the negosendnegotiationrequest function. This function fails to validate the length of the LBLOADBALANCEINFO field before writing to a fixed 512-byte buffer. A malicious RDP server or man-in-the-middle can send a...

Astra Linux – vulnerability in linux, linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential bug in endbufferasyncwrite According to a syzbot report, endbufferasyncwrite, which handles the completion of block device writes, may detect an abnormal condition of the asyncwrite flag and cause a BUGON...

Astra Linux – Vulnerability in Vim

Vim is an open-source, command-line text editor. A use-after-free vulnerability was discovered in Vim versions prior to 9.1.0764. When closing a buffer visible in a window, the BufWinLeave autocommand can lead to a use-after-free if this autocommand reopens the same buffer in a new split window...