408995 matches found
Astra Linux – vulnerability in linux-6.1, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: validate SVM ioctl nattr against buffer size Validate the nattr field against the buffer size, preventing out-of-bounds buffer access via user-controlled attribute count. cherry picked from commit...
Astra Linux – vulnerability in ntfs-3g
In NTFS-3G versions prior to 2021.8.22, providing a specially crafted Unicode string in an NTFS image can lead to a heap buffer overflow, potentially enabling code execution...
Astra Linux – Vulnerability in espeak-ng
It was discovered that Espeak-ng 1.52-dev contains a Buffer Overflow due to a vulnerability in the ReadClause function in the readclause.c file...
Astra Linux – vulnerability in Chromium
A buffer overflow in WebGL within Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox by using a specially crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: drm/amdkfd: Fixed a race condition involving the unreferencing of the vram buffer in the svm code. The unreferencing of prange-svmbo can occur both in the mmu callback and in a callback after migrating to system RAM. Both are...
Astra Linux – vulnerability in Apache2
Buffer over-read vulnerability in Apache HTTP Server caused by outbound OCSP requests to an attacker-controlled OCSP server This issue affects Apache HTTP Server versions 2.4.0 through 2.4.67. Users are advised to upgrade to version 2.4.68, which resolves the issue...
Astra Linux – vulnerability in Apache2
Apache HTTP Server 2.4.53 and earlier may return buffer lengths to applications calling r:wsread, which go beyond the allocated storage capacity for the buffer...
Astra Linux - vulnerability in qtbase-opensource-src
An issue was found in Qt 5.x prior to 5.15.14, 6.x prior to 6.2.9, and 6.3.x through 6.5.x prior to 6.5.1. QDnsLookup suffers from a buffer over-read caused by a specially crafted reply from a DNS server...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: udmabuf: Set the DMA mask for the udmabuf device v2 If the DMA mask is not set explicitly, the following warning occurs when the user space attempts to access the dma-buf via the CPU, as reported by syzbot: WARNING: CPU: 1 PID...
Astra Linux – Vulnerability in Linux
In the Linux kernel, the following vulnerability has been resolved: bnxten: Fixed the RX consumer index logic in the error path. In bnxtrxpkt, the RX buffers are expected to complete in order. If the RX consumer index indicates an out-of-order buffer completion, it means we are encountering a...
Astra Linux - vulnerability in linux
In various methods of kernel base drivers, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to local privilege escalation requiring System execution privileges. No user interaction is required for exploitation. Product: Android Versions: Android kernel Androi...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: cap TX credit to local buffer size The virtio transports derive their TX credit directly from peerbufalloc, which is set from the remote endpoint’s SOVMSOCKETSBUFFERSIZE value. On the host side, this means that the...
Astra Linux – vulnerability in alsa-lib
Versions 1.2.2 through 1.2.15.2 of alsa-lib, prior to commit 5f7fe33, contain a heap-based buffer overflow in the topology mixer control decoder. The tplgdecodecontrolmixer1 function reads the numchannels field from untrusted .tplg data and uses it as a loop bound without validating it against th...
Astra Linux – vulnerability in linux-5.10, linux-6.1, linux, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: media: dw2102: Fix null-ptr-deref in dw2102i2ctransfer In dw2102i2ctransfer, msg is controlled by user. When msgi.buf is null and msgi.len is zero, the aforementioned checks on msgi.buf would be performed. Malicious data then...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: drm/panfrost: Fixed corruption of the shrinker list caused by the madvise IOCTL. Calling the madvise IOCTL twice on BO causes corruption of the memory shrinker list, leading to a kernel crash. This occurs because BO is already on...
Astra Linux – vulnerability in linux-6.1, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: ntfs3: Fix uninit buffer allocated by getname The uninit errors that occur after allocating a buffer to ‘de’ are now fixed by initializing the buffer with zeros. This fix was discovered using KMSAN...
Astra Linux – vulnerability in linux-5.10, linux, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: net: macb: fix a memory corruption in extended buffer descriptor mode For quite some time, we were chasing a bug that appeared to cause sudden, permanent failures in networking and MMU on certain devices. This bug was highly...
Astra Linux – Vulnerability in Qemu
QEMU prior to version 8.2.0 has an integer underflow issue, which can lead to a buffer overflow. This occurs due to a TI command, where a transfer length that is not a DMA transfer is processed, and the actual transfer length is shorter than the length of the available FIFO data. This issue arise...
Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: can: hi311x: populate ndochangemtu to prevent buffer overflow Sending a PFPACKET allows bypassing the CAN framework logic and directly reaching the xmit function of a CAN driver. The only check performed by the PFPACKET framework...