409014 matches found
Astra Linux – Vulnerability in Python 3.7, PHP 7.3
The Keccak XKCP SHA-3 reference implementation, prior to the update of fdc6fef, has an integer overflow and resulting buffer overflow issue. This vulnerability allows attackers to execute arbitrary code or compromise the expected cryptographic properties of the algorithm. This issue occurs within...
Astra Linux - vulnerability in pillow
In Pillow’s path.c file, pathgetbbox prior to version 9.0.0 contains a buffer over-read during the initialization of ImagePath.Path...
Astra Linux – Vulnerability in freerdp3
Versions of FreeRDP prior to 3.31.0 contain a heap-based buffer overflow issue in the negosendnegotiationrequest function, when processing Server Redirection PDU messages with LoadBalanceInfo fields controlled by an attacker. A malicious RDP server can trigger this overflow by sending a field of...
Astra Linux – Vulnerability in exim4
Exim 4 before 4.94.2 allowed Buffer Underwrite, which could allow unauthenticated remote attackers to execute arbitrary commands. This is because smtpungetc was only intended for pushing back characters, but it can actually be used to push back non-character error codes, such as EOF...
Astra Linux – vulnerability in linux-5.15
In the Linux kernel, the following vulnerability has been resolved: media: cx23885: Fix a null-ptr-deref bug in bufferprepare and bufferfinish When the driver calls cx23885riscbuffer to prepare the buffer, the function call dmaalloccoherent may fail, resulting in an empty buffer risc-cpu. Later,...
Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: uiohvgeneric: Allow userspace to control the interrupt mask Remove the logic that sets the interrupt mask by default in uiohvgeneric; the interrupt mask value should be entirely controlled by userspace. If the mask bit is changed...
Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: comedi: medaq: Fix potential overrun of firmware buffer me2600xilinxdownload loads the firmware requested by requestfirmware. It is possible for it to overrun the source buffer due to its blind trust in the file format. It reads ...
Astra Linux – Vulnerability in ffmpeg
There is a heap-based Buffer Overflow vulnerability in FFmpeg 4.2, located in the filterframe module of libavfilter/vfbitplanenoise.c. This vulnerability may lead to memory corruption and other potential issues...
Astra Linux – vulnerability in libde265
Libde265 v1.0.8 was found to contain a stack buffer overflow vulnerability in fallback-motion.cc, specifically in the void putepelhvfallback function. This vulnerability enables attackers to trigger a Denial of Service DoS condition by using a specially crafted video file...
Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: powerpc/64s/slb: Fix SLB multi-hit issue during SLB preload On systems using the hash MMU, there is a software SLB preload cache that mirrors the entries loaded into the hardware SLB buffer. This preload cache is subject to...
Astra Linux – vulnerability in Imagemagick
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-19 and 6.9.13-44, an integer overflow in the despeckle operation causes a heap buffer overflow on 32-bit builds, resulting in an out-of-bounds write. This issue has been fixed in...
Astra Linux – Vulnerability in WebKit2GTK
A buffer overflow issue has been addressed through improved memory handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2, and iPadOS 15.2, as well as watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution...
Astra Linux – vulnerability in Chromium
A buffer overflow in WebGL within Google Chrome prior to version 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox by using a specially crafted HTML page. Chromium security severity: Critical...
Astra Linux – vulnerability in Chromium
A heap buffer overflow in CrashReporting in Google Chrome prior to version 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in libraw
Buffer overflow vulnerability in LibRaw Linux/unix v0.20.0 allows attackers to escalate privileges through the LibRawbufferdatastream::getschar, int function in /src/libraw/src/librawdatastream.cpp...
Astra Linux – vulnerability in glib2.0
An issue was found in GNOME GLib prior to versions 2.66.7 and 2.67.x prior to version 2.67.4. If gbytearraynewtake is called with a buffer of 4GB or more on a 64-bit platform, the length is truncated modulo 232, resulting in unintended length truncation...
Astra Linux – Vulnerability in libde265
Libde265 1.0.9 is vulnerable to Buffer Overflow in ffhevcputhevcqpelpixels8sse...
Astra Linux – vulnerability in libqb
In logblackbox.c within libqb prior to version 2.0.8, a buffer overflow can occur due to overly long log messages, as the header size is not taken into account...
Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: watchqueue: fix pipe accounting mismatch Currently, watchqueuesetsize modifies the pipe buffers allocated to user-pipebufs without updating the pipe-nraccounted value on the pipe itself, due to the if !pipehaswatchqueue check in...