408960 matches found
Astra Linux – vulnerability in ffmpeg5
FFmpeg v.n6.1-3-g466799d4f5 allows an attacker to trigger the use of a parameter with a negative size in the avsamplessetsilence function within the libsamplefmt.c file at line 9...
Astra Linux – Vulnerability in Graphviz
A buffer overflow in the Graphviz Graph Visualization Tools, starting from the commit ID f8b9e035 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service application crash by loading a crafted file into the "lib/common/shapes.c" component...
Astra Linux – Vulnerability in gpac
The GPAC component has a buffer overflow vulnerability in version v391dc7f4d234988ea0bc3cc294eb725eddf8f702. This vulnerability allows attackers to cause a denial of service through the src/scenegraph/svgAttributes.c, svgParseStrings, and gfsvgParseAttribute functions...
Astra Linux – Vulnerability in exempi
The XMP Toolkit version 2020.1 and earlier versions is affected by a Buffer Underflow vulnerability, which could lead to the execution of arbitrary code in the context of the current user. Exploiting this issue requires user interaction, as the victim must open a malicious file...
Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: iio: light: as73211: Ensure buffer holes are zeroed Since the buffer is copied to a kfifo that can ultimately be read by user space, make sure to zero it out...
Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: soc: qcom: mdtloader: Ensure we don’t read past the ELF header When the MDT loader is used in remote proc mode, the ELF header is sanitized beforehand; however, this is not required for other clients. Validate the size of the...
Astra Linux – vulnerability in linux-5.10, linux-6.1, linux, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads8688: fix information leak in triggered buffer The ‘buffer’ local array is used to push data to user space from a triggered buffer; however, it does not set values for inactive channels, as it relies solely on...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu – fixed a heap-buffer-overflow issue in imspcuprocessdata The imspcuprocessdata function processes incoming URB data byte by byte. However, it fails to check whether the readpos index exceeds IMSPCUBUFSIZE. If a...
Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: sctp: fix authhmacs array size in struct sctpcookie The authhmacs array in struct sctpcookie is supposed to store a complete SCTPAUTHHMACALGO parameter, which consists of a struct sctpparamhdr followed by N HMAC identifiers...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix RCU stall while reaping monitor destination ring While processing the monitor destination ring, MSDUs are reaped from the link descriptor based on the corresponding bufid. However, sometimes the driver cannot...
Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: can: kvaserusbleaf: kvaserusbleafwaitcmd: validate received command extents The wait and bulk receive paths process variable-length commands from a USB buffer. A non-zero command shorter than CMDHEADERLEN can still be dispatched;...
Astra Linux – vulnerability in hdf5
Versions 1.14.2 through 1.14.3 of HDF5 contain a buffer overflow in H5Olinfodecode, which corrupts the instruction pointer and can lead to denial of service or arbitrary code execution...
Astra Linux – vulnerability in hdf5
The HDF5 Library up to version 1.14.3 contains a heap-based buffer overflow in H5Olayoutencode within H5Olayout.c, leading to corruption of the instruction pointer...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: pcie: handle randbuf allocation failure The kzalloc in brcmfpciedownloadfwnvram returns null when physical memory runs out. Consequently, if we use getrandombytes to generate random bytes into randbuf, a null...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: rcu: Fix buffer overflow in printcpustallinfo The rcuc-starvation output from printcpustallinfo may overflow the buffer if there is a large difference in jiffies. The situation may seem unlikely, but computers sometimes get very...
Astra Linux – vulnerability in linux-5.10, linux-6.1, linux, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: nilfs2: Fix kernel bug caused by missing clearing of buffer delay flag Syzbot reported that after nilfs2 reads a corrupted file system image and becomes read-only, the BUGON check for the buffer delay flag in submitbhwbc may fail...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: can: j1939: j1939sessionnew: fix skb reference counting Since j1939sessionskbqueue performs an additional skbget operation for each new skb, doing the same operation for the initial skb in j1939sessionnew will prevent refcount...
Astra Linux – vulnerability in linux-5.10, linux-6.1, linux, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix freeing of the HMB descriptor table The HMB descriptor table is sized to the maximum number of descriptors that can be used for a given device; however, nvmeallochostmem may break out of the loop earlier due to a...
Astra Linux – vulnerability in xwayland, xorg-server
A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey is called with a 0 group, it will resize the key symbols table to 0 while leaving the key actions unchanged. Later, if the same function is called with a non-zero value for groups, this will result in a buffer overflow...