Astra Linux – vulnerability in linux-5.10, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: orangefs: skip leading spaces before parsing client debug masks orangefspreparecdmarray sizes each client debug keyword buffer using strcspncdshead, " ", but then parses the keyword using %s. The %s conversion skips leading...

Astra Linux – vulnerability in aom

The aomdsp/noisemodel.c file in libaom within AOMedia prior to 2021-03-24 contains a buffer overflow...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: A potential buffer underflow has been fixed in ath11khalrxmsdulistget. When the first entry in msdudetails has a zero buffer address, the code accesses msdudetailsi - 1 when i == 0, resulting in a buffer underflow...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: USB: serial: ioedgeport: cap received transmit credits The interrupt-status packet reports the transmit credits returned by the device. The edgeinterruptcallback function adds the 16-bit value to txCredits without checking...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ACPI: pfrupdate: fix stack buffer overflow in querycapability querycapability copies four ACPI buffer objects returned by the firmware DSM into fixed-size u816 fields in struct pfruupdatecapinfo using memcpy with the...

Astra Linux – vulnerability in linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: reduce the MHI channel buffer length to 8KB Currently, the buflen field in ath11kmhiconfigqca6390 is set to 0, causing MHI to use the default size of 64KB for allocating channel buffers. This may fail under certain...

Astra Linux – vulnerability in mariadb-10.3

It has been discovered that MariaDB Server versions 10.7 and earlier contain a global buffer overflow in the decimalbinsize component, which can be exploited via specially crafted SQL statements...

Astra Linux – vulnerability in edk2

Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: rcu: Fix buffer overflow in printcpustallinfo The rcuc-starvation output from printcpustallinfo may overflow the buffer if there is a large difference in jiffies. The situation may seem unlikely, but computers sometimes get very...

Astra Linux – Vulnerability in atftp

In tftpdfile.c in atftp up to 0.7.4, there is a buffer overflow issue due to improper handling of buffer-size parameters, which does not correctly account for combinations of data, OACK, and other options...

Astra Linux – vulnerability in libxml2

The GNOME project libxml2 v2.9.10 contains a global buffer over-read vulnerability in xmlEncodeEntitiesInternal within libxml2/entities.c. This issue has been fixed in commit 50f06b3e...

Astra Linux – Vulnerability in Freetype

It was discovered that the FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f contains a heap buffer overflow issue through the sfntinitface function...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate command header size against SVGACMDMAXDATASIZE This data originates from userspace and is used in buffer offset calculations; it may potentially overflow, leading to an out-of-bounds access...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: MIPS: mm: Fix out-of-bounds write in maarreswalk maarreswalk uses wi-numcfg as the index into the fixed-size wi-cfg array; however, it checks whether the array is full only after filling the selected entry. If walksystemramrange...

Astra Linux – vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.20.1, a global buffer overflow was observed in FreeRDP’s Base64 decoding path. The root cause appears to be implementation-defined character signedness: on Arm/AArch64 builds, plain characters are treated as...

Astra Linux – vulnerability in linux, linux-5.10

In the Linux kernel, the following vulnerability has been resolved: proc/vmcore: fix clearing user buffer by properly using clearuser To clear a user buffer, we cannot simply use memset; we must use clearuser. With a virtio-mem device that registers a vmcorecb and contains some logically unplugge...

Astra Linux – Vulnerability in pillow

In Pillow before 8.1.0, PcxDecode has a buffer over-reading issue when decoding a crafted PCX file, because the user-supplied stride value is trusted for buffer calculations...

Astra Linux – vulnerability in Apache2

Heap-based Buffer Overflow vulnerability in Apache HTTP Server with modxml2enc, xml2StartParse, and untrusted content This issue affects Apache HTTP Server versions 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue...

Astra Linux – Vulnerability in Apache2

A buffer overflow in modproxyhtml in the Apache HTTP Server 2.4.67 and earlier versions allows an attack by a untrusted backend. Users are recommended to upgrade to version 2.4.68, which fixes this issue...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: can: kvaserusbleaf: kvaserusbleafwaitcmd: validate received command extents The wait and bulk receive paths process variable-length commands from a USB buffer. A non-zero command shorter than CMDHEADERLEN can still be dispatched;...