Astra Linux – vulnerability in fig2dev

A stack-based buffer overflow in the genpstrxtext component within genpstricks.c in fig2dev 3.2.7b enables attackers to cause a denial of service by converting an xfig file to pstricks format...

Astra Linux – Vulnerability in ffmpeg

A buffer overflow vulnerability exists in FFmpeg 4.2 in the movwritevideotag function, due to an out-of-bounds access in the libavformat/movenc.c file. This vulnerability could allow a remote malicious user to obtain sensitive information, cause a Denial of Service, or execute arbitrary code...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fixed an OOB read issue in indxinsertintobuffer. Syzbot reported a OOB read bug: Bug: KASAN: Out-of-bounds access in indxinsertintobuffer+0xaa3/0x13b0 fs/ntfs3/index.c:1755 A read of size 17168 was performed at address...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ibmvnic: Use kernel helpers for hex dumps Previously, when the driver was printing hex dumps, the buffer was cast to an 8 byte long and printed using string formatters. If the buffer size was not a multiple of 8, a read buffer...

Astra Linux – Vulnerability in TIF format

Libtiff 4.5.0 is vulnerable to a Buffer Overflow issue through /libtiff/tools/tiffcrop.c:8499. Incorrect updates to the buffer size after the rotateImage function in tiffcrop cause a Heap-Buffer-Overflow and Segmentation Fault...

Astra Linux – vulnerability in tiff

LibTiff 4.5.0 is vulnerable to a Buffer Overflow in uvencode when LibTiff reads a corrupted little-endian TIFF file and specifies that the output should be big-endian...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackh323: fix OOB read in decodechoice In decodechoice, the boundary check before getlen uses the variable len, which remains 0 after initialization at the beginning of the function: unsigned int type, ext, len ...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: tracing: Fixed an out-of-bounds write in traceseqtobuffer. syzbot reported this bug: ================================================================== Bug: KASAN: Out-of-bounds access in traceseqtobuffer in...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: smb: client: Added a check for nextbuffer in receiveencryptedstandard. Added a check on the return values of cifsbufget and cifssmallbufget in receiveencryptedstandard to prevent null pointer dereferencing...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: brcmfmac: A NULL pointer dereference occurred in the brcmftxfinalize function. When the device is removed or the kernel module is unloaded, a potential NULL pointer dereference may occur. The following sequence leads to the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ocfs2: The uncached inode fails to enter the group. Syzbot has reported the following BUG: Kernel BUG at fs/ocfs2/uptodate.c:509! … Call Trace: ? diebody+0x5f/0xb0 ? die+0x9e/0xc0 ? dotrap+0x15a/0x3a0 ?...

Astra Linux – Vulnerability in imagemagick

ImageMagick prior to version 7.1.2-15 contains a heap-buffer-overflow read vulnerability in GetPixelIndex, which is caused by OpenPixelCache updating image channel metadata before pixel cache memory allocation is performed. Attackers can exploit this vulnerability to trigger memory and disk...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: media: rainshadow-cec: Fixed the TOCTOU race condition in raininterrupt. In the interrupt handler raininterrupt, the check for buffer fullness on rain-buflen is performed before acquiring rain-buflock. This creates a Time-of-Chec...

Astra Linux – Vulnerability in vorbis-tools

A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package, within the remotethread function in remote.c. This vulnerability occurs during the remote control functionality, when processing malformed inputs, resulting in a buffer underflow that c...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: fbdev: vt8500lcdfb: fixed the issue where dmafreecoherent was not called when memory was freed. The fbi-fb.screenbuffer is allocated using dmaalloccoherent, but it is not freed if an error path occurs...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: b43: A bound check was added for the firmware-controlled key index in b43rx. The key index controlled by the firmware in b43rx may exceed the size of the dev-key array 58 entries. The existing B43WARNON flag does not enforc...

Astra Linux – Vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.20.1, a heap-buffer overflow occurred during drive reads when a server-controlled read length was used to read file data into an IRP output stream buffer without a hard upper limit. This allowed an oversized read ...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: net/mlx5e: Fixed the issue where zero-sized buffers were allocated for HV VHCA statistics. The function mlx5ehvvhcastatscreate is called from mlx5enicenable, before mlx5eopen. At that point, priv-statsnch remains zero, because...

Astra Linux – vulnerability in webkit2gtk

A buffer overflow issue has been addressed through improved memory handling. This issue is fixed in Safari 16, iOS 16, iOS 15.7, and iPadOS 15.7. Processing maliciously crafted web content may result in arbitrary code execution...

Astra Linux – vulnerability in ffmpeg5

FFmpeg v.n6.1-3-g466799d4f5 allows an attacker to trigger the use of a parameter with a negative size in the avsamplessetsilence function within the libsamplefmt.c file at line 9...