408995 matches found
Astra Linux – Vulnerability in glibc
The iconv feature in the GNU C Library also known as glibc or libc6, up to version 2.32, may have a buffer over-read issue when processing invalid multi-byte input sequences in the EUC-KR encoding...
Astra Linux – vulnerability in libwebp
A flaw was found in libwebp in versions prior to 1.0.1. A heap-based buffer overflow is possible in the WebPDecodeRGBInto function due to an invalid check on buffer size. The primary risks associated with this vulnerability are data confidentiality, data integrity, and system availability...
Astra Linux – Vulnerability in Redis
Redis is an open-source, in-memory database that persists data on disk. When using the Redis Lua Debugger, users can send malformed requests, causing the debugger’s protocol parser to read data beyond the actual buffer. This issue affects all versions of Redis with Lua debugging support 3.2 or...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: IORINGOPREAD failed to properly consume the provided buffer list when read i/o returned 0 except for -EAGAIN and -EIOCBQUEUED return. This can lead to a potential use-after-free condition when the completion via iorwdone runs in ...
Astra Linux – vulnerability in linux, linux-5.10, linux-5.15, linux-6.1
In the Linux kernel, the following vulnerability has been resolved: nilfs2: handle inconsistent state in nilfsbtnodecreateblock Syzbot reported that a buffer state inconsistency was detected in nilfsbtnodecreateblock, triggering a kernel bug. It is not appropriate to treat this inconsistency as a...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: net: vertexcom: mse102x: Fix possible double free of TX skb The scope of the TX skb is wider than just mse102xtxframespi; therefore, if the TX skb buffer needs to be expanded, we should free the temporary skb rather than the...
Astra Linux – vulnerability in linux-5.10
In the Linux kernel, the following vulnerability has been resolved: NFS: Fix potential buffer overflow in nfssysfslinkrpcclient The name field is defined as char64, while the size of clnt-clprogram-name remains unknown. Direct invocation of strcat can also result in a potential buffer overflow...
Astra Linux – vulnerability in linux-5.10, linux-6.1, linux, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: iio: imu: kmx61: fix information leak in triggered buffer The ‘buffer’ local array is used to push data to user space from a triggered buffer; however, it does not set values for inactive channels, as it relies solely on...
Astra Linux – vulnerability in linux-5.10, linux-6.1, linux, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: printk: Fix signed integer overflow when defining LOGBUFLENMAX Shifting 1 31 on a 32-bit int causes signed integer overflow, which leads to undefined behavior. To prevent this, cast 1 to u32 before performing the shift, ensuring...
Astra Linux – vulnerability in Ghostscript
An issue was found in Artifex Ghostscript prior to version 10.05.0. The BJ10V device has a print buffer overflow in contrib/japanese/gdev10v.c...
Astra Linux – Vulnerability in aspell
The libaspell.a module in GNU Aspell prior to version 0.60.8 has a stack-based buffer overflow issue in the common::unescape function within common/getdata.cpp, caused by an isolated \ character...
Astra Linux – Vulnerability in openjpeg2
A flaw was discovered in OpenJPEG’s encoder, specifically in the opjdwtcalcexplicitstepsizes function. This flaw allows an attacker who can provide crafted inputs for the decomposition levels to cause a buffer overflow. The greatest threat of this vulnerability is to system availability...
Astra Linux – Vulnerability in exim4
Exim 4 before 4.94.2 has an improper restriction on write operations within the bounds of a memory buffer. This occurs when processing name=value pairs within MAIL FROM and RCPT TO commands...
Astra Linux – vulnerability in rustc
In the standard library in Rust prior to version 1.50.0, readtoend does not validate the return value from Read in an unsafe context. This bug could lead to a buffer overflow...
Astra Linux – Vulnerability in Linux
In the file drivers/pci/hotplug/rpadlpar/sysfs.c within the Linux kernel up to version 5.11.8, the RPA PCI Hotplug driver suffers a user-tolerable buffer overflow when writing a new device name to the driver from user space. This allows user space to write data directly to the kernel stack frame...
Astra Linux – Vulnerability in klibc
A issue was discovered in klibc before version 2.0.9. Multiple potential integer overflows in the cpio command on 32-bit systems could lead to a buffer overflow or other security issues...
Astra Linux – Vulnerability in Linux
In the Linux kernel, the following vulnerability has been resolved: net: lltemac: Ensure that the skb is freed when it is completely used. By using the TX BD to track the skb pointer, we can efficiently free the skb buffer after the frame has been transmitted. However, to avoid freeing the skb...
Astra Linux – Vulnerability in Linux
In the Linux kernel, the following vulnerability has been resolved: can: j1939: fixed Use-after-Free, failed to increment the ref count of the skb while it was in use. This patch addresses a Use-after-Free issue identified by the syzbot. The problem arises when a skb is taken from the per-session...
Astra Linux – vulnerability in faad2
There is a stack-based buffer overflow in the third instance of the calculategain function in libfaad/sbrhfadj.c within Freeware Advanced Audio Decoder 2 FAAD2 version 2.8.8. A specially crafted input may result in a denial of service or potentially other unspecified impacts due to improper...