Astra Linux – vulnerability in jq

jq is a command-line JSON processor. A integer overflow vulnerability exists in versions 1.8.1 and earlier within the jvpstringappend and jvpstringcopyreplacebad functions. Concatenating strings whose combined length exceeds 2^31 bytes results in a 32-bit unsigned integer overflow during buffer...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: crypto: algifaead - Fix minimum RX size check for decryption The check for the minimum receive buffer size did not take the tag size into account during decryption. Fix this by adding the required extra length...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: crypto: algifaead - snapshot IV for async AEAD requests Currently, AFALG AEAD AIO requests utilize a socket-wide IV buffer during request processing. For async requests, subsequent socket activity may update this shared state...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: A buffer overflow issue was addressed using a keyed discard mechanism. Since commit 68c5c42567bc “dm-integrity: replacing the forgeable discard filler with a keyed sector marker”, integritymetadata calculates a...

Astra Linux – Vulnerability in Redis

Redis is an open-source, in-memory database that persists data on disk. In versions starting from 2.6 and prior to 7.4.3, an unauthenticated client can cause the output buffer to grow indefinitely, until the server runs out of memory or is terminated. By default, Redis’s configuration does not...

Astra Linux – vulnerability in libexif

LibExif up to version 0.6.25 contains a flaw in decoding MakerNotes. If the exifmnotedatagetvalue function receives a buffer with a size of 0, the provided buffer will be overwritten due to an integer underflow...

Astra Linux – vulnerability in exiv2

Exiv2 is a C++ library and a command-line utility for reading, writing, deleting, and modifying Exif, IPTC, XMP, and ICC image metadata. Prior to version 0.28.8, an out-of-bounds read vulnerability was found in Exiv2. The vulnerability resides in the preview component; it is triggered only when...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: mctp: i2c: fix skb memory leak in receive path When ‘midev-allowrx’ is false, the newly allocated skb is not consumed by netifrx; it must be freed directly...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: can: emsusb: emsusbreadbulkcallback: check the proper length of a message When examining data within a USB urb, the actuallength is the size of the buffer passed to the driver; it is not the transferbufferlength set by the driver...

Astra Linux - vulnerability in linux

In the Linux kernel, the following vulnerability has been resolved: net: cdceem: fix tx fixup skb leak When usbnet transmits a skb, it is fixed via eemtxfixup. If skbcopyexpand fails, it returns NULL; consequently, usbnetstartxmit has no chance to free the original skb. The fix involves freeing t...

Astra Linux – Vulnerability in libmysofa

A buffer overflow in the readDataVar function in hdf/dataobject.c within Symonics’ libmysofa 0.5 – 1.1 allows attackers to execute arbitrary code through a crafted SOFA...

Astra Linux – Vulnerability in WebKit2GTK

In WebKitGTK up to 2.36.0 and WPE WebKit, there is a heap-based buffer overflow in WebCore::TextureMapperLayer::setContentsLayer in WebCore/platform/graphics/texmap/TextureMapperLayer.cpp...

Astra Linux – Vulnerability in freerdp3

Versions of FreeRDP prior to 3.31.0 contain a heap buffer overflow vulnerability in the negosendnegotiationrequest function. This function fails to validate the length of the LBLOADBALANCEINFO field before writing to a fixed 512-byte buffer. A malicious RDP server or man-in-the-middle can send a...

Astra Linux – vulnerability in linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate request buffer size in smb2allocaterspbuf The response buffer should be allocated in smb2allocaterspbuf before validating the request. However, fields within the payload as well as the smb2 header are also used by...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events The DSP event handling code in hwdepread could write more bytes to the user buffer than requested, when a user provides a buffer smaller than the event header...

Astra Linux – vulnerability in exim4

Exim 4 prior to version 4.94.2 allows integer overflow leading to a buffer overflow in receiveaddrecipient when processing an email message with fifty million recipients. NOTE: Remote exploitation may be difficult due to resource consumption...

Astra Linux – vulnerability in linux, linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix buffer overflow when parsing NFS reparse points ReparseDataLength is the sum of the InodeType size and DataBuffer size. To determine the DataBuffer size, it is necessary to subtract the InodeType size from...

Astra Linux – vulnerability in Chromium

A buffer overflow in Blink within Google Chrome prior to version 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside the sandbox via a specially crafted HTML page. Chromium security severity: Medium...

Astra Linux – vulnerability in linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: validate SVM ioctl nattr against buffer size Validate the nattr field against the buffer size, preventing out-of-bounds buffer access via user-controlled attribute count. cherry picked from commit...

Astra Linux – vulnerability in ntfs-3g

In NTFS-3G versions prior to 2021.8.22, providing a specially crafted Unicode string in an NTFS image can lead to a heap buffer overflow, potentially enabling code execution...