Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: pstore: ramcore: Fixed an issue where an incorrect success return occurred when vmap failed. In persistentramvmap, vmap might return NULL upon failure. If the offset is non-zero, adding offsetinpagestart causes the function to...

Astra Linux – vulnerability in Apache2

Apache HTTP Server 2.4.53 and earlier may return buffer lengths to applications calling r:wsread, which go beyond the allocated storage capacity for the buffer...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: validate portcount against message length in t7xxportenummsghandler t7xxportenummsghandler uses the portcount field provided by the modem as an index into portmsg-data, without verifying that the message buffer...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: skbuff: Account for tail adjustment during pull operations Extending the tail of a data structure may have some unexpected side effects if a program uses a helper function like BPFFUNCskbpulldata to read partial content beyond th...

Astra Linux – vulnerability in gst-plugins-good1.0

GStreamer is a library for constructing graphs of media-handling components. An out-of-bounds read has been discovered in gstwavparsecuechunk within gstwavparse.c. The vulnerability arises from a discrepancy between the size of the data buffer and the size value provided to the function. This...

Astra Linux - vulnerability in pillow

In Pillow’s path.c file, pathgetbbox prior to version 9.0.0 contains a buffer over-read during the initialization of ImagePath.Path...

Astra Linux – vulnerability in libqb

In logblackbox.c within libqb prior to version 2.0.8, a buffer overflow can occur due to overly long log messages, as the header size is not taken into account...

Astra Linux – vulnerability in jq

jq is a command-line JSON processor. A integer overflow vulnerability exists in versions 1.8.1 and earlier within the jvpstringappend and jvpstringcopyreplacebad functions. Concatenating strings whose combined length exceeds 2^31 bytes results in a 32-bit unsigned integer overflow during buffer...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/adm1266 include PEC byte in pmbusblockxfer read buffer adm1266pmbusblockxfer sets up the read transaction with .buf = data-readbuf, .len = ADM1266PMBUSBLOCKMAX + 2, but readbuf in struct adm1266data is declared as u8...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: sctp: fix authhmacs array size in struct sctpcookie The authhmacs array in struct sctpcookie is supposed to store a complete SCTPAUTHHMACALGO parameter, which consists of a struct sctpparamhdr followed by N HMAC identifiers...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: rcu: Fix buffer overflow in printcpustallinfo The rcuc-starvation output from printcpustallinfo may overflow the buffer if there is a large difference in jiffies. The situation may seem unlikely, but computers sometimes get very...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: mctp: Serial: Handling of zero-length frames to prevent RX buffer overflow The MCTP serial receive state machine reads the frame length byte in the mctpSerialPushHeader function’s case 2, and validates it as an upper-bound-only...

Astra Linux - vulnerability in htmldoc

A stack-based buffer under-read in htmldoc prior to version 1.9.12 allows attackers to trigger a denial of service by sending a specially crafted BMP image to imageloadbmp...

Astra Linux – vulnerability in gst-plugins-bad1.0

GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability enables remote attackers to execute arbitrary code on affected installations of GStreamer. Exploitation requires interaction with this library; however, the attack vectors may vary depending...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: x86/mm, kexec, ima: Use memblockfreelate instead of imafreekexecbuffer The code that calls imafreekexecbuffer runs long after the memblock allocator has already been torn down, potentially leading to a use-after-free in...

Astra Linux – vulnerability in fig2dev

A stack-based buffer overflow in the genpstrxtext component within genpstricks.c in fig2dev 3.2.7b enables attackers to cause a denial of service by converting an xfig file to pstricks format...

Astra Linux – vulnerability in linux, linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: afs: Increase buffer size in afsupdatevolumestatus The maximum length of volume-vid value is 20 characters. So increase idbuf size up to 24 to avoid overflow. Found by Linux Verification Center linuxtesting.org with SVACE. DH:...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: crypto: scomp – fixed the req-dst buffer overflow issue. The size of the req-dst buffer should be checked before copying data from scompscratch-dst to avoid the req-dst buffer overflow problem...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: i2c: i801 – Fixed block process call transactions. According to the Intel datasheets, software must reset the block buffer index twice for block process call transactions: once before writing the outgoing data to the buffer, and...

Astra Linux – Vulnerability in ffmpeg

A buffer overflow vulnerability exists in FFmpeg 4.2 in the movwritevideotag function, due to an out-of-bounds access in the libavformat/movenc.c file. This vulnerability could allow a remote malicious user to obtain sensitive information, cause a Denial of Service, or execute arbitrary code...