Astra Linux – Vulnerability in pillow

In versions 8.2.0 and earlier of Pillow, as well as versions 1.1.7 and earlier of PIL Python Imaging Library, an attacker can pass controlled parameters directly into the convert function, thereby triggering a buffer overflow in Convert.c...

Astra Linux – Vulnerability in Wireshark

A buffer overflow in the C12.22 dissector in Wireshark versions 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows for denial of service through packet injection or malicious capture files...

Astra Linux – vulnerability in gmp

GNU Multiple Precision Arithmetic Library GMP up to version 6.2.1 contains an integer overflow in mpz/inpraw.c, which can be exploited via specially crafted input to cause a buffer overflow; this results in a segmentation fault on 32-bit platforms...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: video: fbdev: nvidiafb: Use strscpy to prevent buffer overflow Coverity reports a possible buffer overflow issue. However, given the ‘static’ scope of nvidiasetupi2cbus, it seems that this issue cannot occur after examining the...

Astra Linux – vulnerability in webkit2gtk

A buffer overflow issue has been addressed through improved memory handling. This issue is fixed in Safari 16, iOS 16, iOS 15.7, and iPadOS 15.7. Processing maliciously crafted web content may result in arbitrary code execution...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/pt: Fixed a crash that occurred with stop filters in single-range mode. A check for !buf-single was added before calling ptbufferregionsize in places where a missing check could cause a kernel crash. This fix...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: ALSA: oss: Fixed an issue where PCM OSS buffer allocation might overflow. We have received reports of situations where INTMAX overflow occurs at vmalloc, due to allocations called from sndpcmplugalloc. Although we have applied...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: net: mctp: take ownership of skb in mctplocaloutput Currently, mctplocaloutput only takes ownership of skb upon success; however, we may leak an skb if mctplocaloutput fails under certain conditions. The skb ownership is not...

Astra Linux – Vulnerability in fig2dev

Fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: i2c: mlxbf: prevents stack overflow in mlxbfi2csmbusstarttransaction The memcpy function is called in a loop, without checking the upper bound of 'operation-length', and 'dataidx' is also incremented...

Astra Linux – Vulnerability in aspell

The libaspell.a file in GNU Aspell before version 0.60.8 has a buffer overflow issue for strings that end with a single '\0' byte. This issue occurs when the encoding is set to ucs-2 or ucs-4 outside of the application, as indicated by the ASPELLCONF environment variable...

Astra Linux – Vulnerability in openimageio

A buffer overflow vulnerability exists in OpenImageIO v.2.4.12.0 and earlier versions. This vulnerability allows a remote attacker to execute arbitrary code and obtain sensitive information through a crafted file sent to the readimg function...

Astra Linux – Vulnerability in exempi

A buffer overflow vulnerability exists in WEBPSupport.cpp in exempi 2.5.0 and earlier, allowing remote attackers to cause a denial of service by opening crafted webp files...

Astra Linux – vulnerability in gst-plugins-bad1.0

GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability enables remote attackers to execute arbitrary code on affected installations of GStreamer. Exploitation requires interaction with this library; however, the attack vectors may vary depending...

Astra Linux – vulnerability in nasm

A buffer overflow vulnerability in the scan function within stdscan.c in nasm 2.15rc0 enables remote attackers to cause a denial of service by using a specially crafted asm file...

Astra Linux – Vulnerability in Zabbix

The zabbix/src/libs/zbxjson module is vulnerable to a buffer overflow when parsing JSON files using zbxjsonopen...

Astra Linux – vulnerability in Zabbix

The vulnerability arises from improper checks; specifically, it fails to verify whether RDLENGTH overflows the buffer in responses from DNS servers...

Astra Linux – vulnerability in Redis

Redis is an in-memory database that persists data to disk. Redis fails to properly handle resizing of memory buffers, which can lead to integer overflow, causing a heap overflow and potentially enabling remote code execution. This issue has been fixed in versions 7.0.15 and 7.2.4...

Astra Linux – vulnerability in libde265

Libde265 v1.0.12 was found to contain multiple buffer overflows caused by the numtilecolumns and numtilerow parameters in the function picparameterset::dump...

Astra Linux – vulnerability in squid

Squid is a caching proxy for the Web that supports HTTP, HTTPS, FTP, and other protocols. Due to a Buffer Overread bug, Squid is vulnerable to Denial of Service attacks targeting its HTTP message processing. This bug has been fixed in Squid version 6.5; users are advised to upgrade. No known...