406472 matches found
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: drm/amd/display: Fixed NULL dereference and buffer over-reading in SDP debugfs Why & How The function dpsdpmessagedebugfswrite dereferences connector-base.state-crtc without checking for NULL. A connector may be connected but...
Astra Linux – Vulnerability in freerdp3
Versions of FreeRDP prior to 3.31.0 contain a heap buffer overflow vulnerability in the negosendnegotiationrequest function. This function fails to validate the length of the LBLOADBALANCEINFO field before writing to a fixed 512-byte buffer. A malicious RDP server or man-in-the-middle can send a...
Astra Linux – vulnerability in linux, linux-5.10, linux-5.15, linux-6.1
In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential bug in endbufferasyncwrite According to a syzbot report, endbufferasyncwrite, which handles the completion of block device writes, may detect an abnormal condition of the asyncwrite flag and cause a BUGON...
Astra Linux – Vulnerability in Vim
Vim is an open-source, command-line text editor. A use-after-free vulnerability was discovered in Vim versions prior to 9.1.0764. When closing a buffer visible in a window, the BufWinLeave autocommand can lead to a use-after-free if this autocommand reopens the same buffer in a new split window...
Astra Linux – Vulnerability in libavif
In libavif before version 1.3.0, the makeRoom function in stream.c has an integer overflow, resulting in a buffer overflow at stream-offset+size...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: Media: usbtv: Locked resolution during streaming When a program is streaming e.g., ffplay and another program changes the TV standard from NTSC to PAL, the kernel crashes due to attempting to access unmapped memory. Changing from...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: net: mana: Fixed the issue of double-fetching of hwcmsgid from the DMA buffer. In manahwcrxeventhandler, resp-response.hwcmsgid is read from DMA-coherent memory and checked for validity. Then, manahwchandleresp rereads the same...
Astra Linux – Vulnerability in net-snmp
Net-SNMP is an SNMP application library, tools, and daemon. Prior to versions 5.9.5 and 5.10.pre2, a specially crafted packet sent to the net-SNMP snmptrapd daemon could cause a buffer overflow, resulting in the daemon crashing. This issue has been fixed in versions 5.9.5 and 5.10.pre2...
Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: qca – fixed an issue where information was leaked when fetching the fw build id. Added missing sanity checks and moved the 255-byte build-id buffer off the stack to prevent the leakage of stack data through debugfs,...
Astra Linux – Vulnerability in opensc
The TCOS smart card software driver in OpenSC before version 0.21.0-rc1 has a stack-based buffer overflow in the tcosdecipher function...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: misc: fastrpc: Fix for copy buffer page size For non-registered buffers, the fastrpc driver copies the buffer and passes it to the remote subsystem. There is a problem with the current implementation of page size calculation, ...
Astra Linux – vulnerability in Redis
Redis is an in-memory database that persists data to disk. Redis fails to properly handle resizing of memory buffers, which can lead to integer overflow, causing a heap overflow and potentially enabling remote code execution. This issue has been fixed in versions 7.0.15 and 7.2.4...
Astra Linux – Vulnerability in hdf5
HDF5 through 1.14.3 contains a stack buffer overflow issue in H5Rdecodeheap, which leads to corruption of the instruction pointer and causes denial of service or potential code execution...
Astra Linux – vulnerability in exempi
The XMP Toolkit SDK version 2020.1 and earlier is affected by a buffer overflow vulnerability that could potentially lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction; a victim must open a specially crafted file...
Astra Linux - Vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: tls: ensure that the stream is aborted if headers are invalid Normally, we wait for the socket to buffer the entire record before processing it. However, if the socket has a very small buffer, we read the data sooner to prevent...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: Wifi: wlcore – Ensure skbheadroom before calling skbpush. This fix prevents occasional skbunderpanic errors in wl1271txwork. In this case, the allocated headroom is less than necessary typically 110 – 94 = 16 bytes...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: A memory leak was avoided in the magicmousereportfixup function. The magicmousereportfixup function returned a buffer that was allocated using kmemdup. However, this buffer was never freed. The caller of...
Astra Linux – vulnerability in linux-5.10, linux-6.1, linux, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix freeing of the HMB descriptor table The HMB descriptor table is sized to the maximum number of descriptors that can be used for a given device; however, nvmeallochostmem may break out of the loop earlier due to a...
Astra Linux – vulnerability in linux-5.10
In the Linux kernel, the following vulnerability has been resolved: NFS: Fix potential buffer overflow in nfssysfslinkrpcclient The name field is defined as char64, while the size of clnt-clprogram-name remains unknown. Direct invocation of strcat can also result in a potential buffer overflow...