Astra Linux – vulnerability in linux-5.10, linux-6.1, linux, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix race issue between cpu buffer write and swap A warning occurred in rbendcommit at this line: if RBWARNONcpubuffer, !localread&cpubuffer-committing WARNING: CPU: 0 PID: 139 at kernel/trace/ringbuffer.c:3142...

Astra Linux – vulnerability in gst-plugins-base1.0

In GStreamer up to version 1.26.1, the parsesubriptime function in the subparse plugin may write data beyond the bounds of a stack buffer, resulting in a crash...

Astra Linux - vulnerability in linux

In the Linux kernel, the following vulnerability has been resolved: can: dev: canrestart: fix use after free bug After calling netifrxniskb, dereferencing skb is unsafe. Specifically, the canframe cf which aliases skb memory is accessed after the netifrxni in: stats-rxbytes += cf-len; Reordering...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux

In the Linux kernel, the following vulnerability has been resolved: media: camss: Clean up received buffers on failed start of streaming It is required to return the received buffers, if streaming cannot be started. For instance, mediapipelinestart may fail with EPIPE if a link validation between...

Astra Linux – vulnerability in libde265

LibDe265 v1.0.4 contains a global buffer overflow in the decodeCABACbit function, which can be exploited via a specially crafted file...

Astra Linux – vulnerability in libde265

Libde265 v1.0.8 was found to contain a heap-buffer-overflow vulnerability in fallback-motion.cc via putweightedpredavg16fallback. This vulnerability enables attackers to trigger a Denial of Service DoS condition by using a specially crafted video file...

Astra Linux – vulnerability in ffmpeg

A buffer overflow vulnerability exists in FFmpeg 4.2 in the configinput function at libavfilter/aftremolo.c; this could allow a remote malicious user to cause a Denial of Service...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: HID: i2c-hid: fix potential buffer overflow in i2chidgetreport i2chidxfer is used to read recvlen + sizeofle16 bytes of data into ihid-rawbuf. The former can come from the userspace in the hidraw driver and is only bounded by...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Fix race of buffer access at PCM OSS layer The PCM OSS layer attempts to clear the buffer with silence data during initialization or reconfiguration of a stream by explicitly calling sndpcmformatsetsilence using...

Astra Linux – vulnerability in Chromium

Heap buffer overflow in Base in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. Chromium security severity: High...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Drop the channel lock before queuing buffers. Ensure that read and write locks for the channel are not acquired consecutively by dropping the read lock from parsexferevent. This allows a callback provided to the...

Astra Linux – vulnerability in gst-plugins-good1.0

GStreamer is a library for constructing graphs of media-handling components. An out-of-bounds read vulnerability has been found in the parseds64 function within gstwavparse.c. The parseds64 function fails to verify that the buffer buf contains sufficient data prior to attempting to read from it; ...

Astra Linux – vulnerability in linux, linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: Fix buffer size for tag 66 packet The 'TAG 66 Packet Format' description is missing the cipher code and checksum fields that are packed into the message packet. As a result, the buffer allocated for the packet is 3 byte...

Astra Linux – vulnerability in vim

Vim versions prior to 9.0.2142 suffer from a stack-based buffer overflow, as didsetlangmap in map.c calls sprintf to write to the error buffer that is passed to the option callback functions...

Astra Linux – vulnerability in apr-util

An integer overflow or wraparound vulnerability in the aprbase64 functions of Apache Portable Runtime Utility APR-util allows an attacker to write beyond the bounds of a buffer. This issue affects Apache Portable Runtime Utility APR-util version 1.6.1 and earlier...

Astra Linux – vulnerability in Chromium

A heap buffer overflow in Dawn in Google Chrome prior to version 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Apache2

A buffer overflow in modproxyhtml in the Apache HTTP Server 2.4.67 and earlier versions allows an attack by a untrusted backend. Users are recommended to upgrade to version 2.4.68, which fixes this issue...

Astra Linux – vulnerability in linux-5.10, linux, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: usb-storage: alauda: Fix uninit-value in alaudacheckmedia Syzbot caused KMSAN to complain about accessing an uninitialized value within the alauda subdriver of usb-storage: BUG: KMSAN: uninit-value in alaudatransport+0x462/0x57f0...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux

In the Linux kernel, the following vulnerability has been resolved: HID: cp2112: prevent a buffer overflow in cp2112xfer Smatch warnings: drivers/hid/hid-cp2112.c:793 cp2112xfer error: memcpy 'data-block1' too small 33 vs 255 drivers/hid/hid-cp2112.c:793 cp2112xfer error: memcpy 'buf' too small 6...

Astra Linux - vulnerability in htmldoc

A flaw was found in htmldoc in v1.9.12 and prior. A stack buffer overflow in parsetable in ps-pdf.cxx may lead to arbitrary code execution and denial of service...