Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fixed a race condition between searching chunks and releasing the journalhead from the bufferhead. A race condition was encountered between ocfs2testbgbitallocatable and jbd2journalputjournalhead, resulting in the followin...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: In the media section, for staging, in media for zoran, the correct buffer size for zoranreapstatcom was calculated incorrectly. When tmpdcim=1 is set, the index of the buffer was miscalculated. This could lead to a NULL pointer...

Astra Linux – vulnerability in fribidi

A stack-based buffer overflow flaw was found in the Fribidi package. This flaw enables an attacker to supply a specially crafted file to the Fribidi application, potentially resulting in a memory leak or a denial of service...

Astra Linux – Vulnerability in Linux 5.10, Linux

The mm/mremap.c file in the Linux kernel before version 5.13.3 contains a use-after-free issue due to a stale Translation Look-And-Reduce TLB table, as the rmap lock is not held during a PUD move...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Ice: The code for copying the last block was omitted in icegetmoduleeeprom. icegetmoduleeeprom is broken since the commit e9c9692c8a81 “Ice: Reimplement module reads used by ethtool”. In this refactoring, icegetmoduleeeprom reads...

Astra Linux – vulnerability in exiv2

A buffer overflow vulnerability in the Databuf function within types.cpp of Exiv2 v0.27.1 can lead to a denial of service DOS...

Astra Linux – vulnerability in squid

An over-read of a buffer was found in libntlmauth in Squid versions 2.5 through 5.6. Due to improper integer overflow protection, the SSPI and SMB authentication helpers are vulnerable to reading unintended memory locations. In certain configurations, plaintext credentials stored at these locatio...

Astra Linux – vulnerability in memcached

In memcached 1.5.16, when UNIX sockets are used, there is a stack-based buffer over-read in conntostr within memcached.c...

Astra Linux – vulnerability in fig2dev

A stack-based buffer overflow in the genpstrxtext component within genpstricks.c in fig2dev 3.2.7b enables attackers to cause a denial of service by converting an xfig file to pstricks format...

Astra Linux – Vulnerability in TIF format

Libtiff 4.5.0 is vulnerable to a Buffer Overflow issue through the extractContigSamplesBytes function at /libtiff/tools/tiffcrop.c:3215...

Astra Linux – Vulnerability in SOX

A heap buffer overflow vulnerability was discovered in sox, within the lsxreadbuf function at sox/src/formatsi.c:98:16. This flaw can lead to a denial of service, code execution, or information disclosure...

Astra Linux – Vulnerability in imagemagick

The WriteOnePNGImage function from coders/png.c the PNG encoder contains a for loop with an improper exit condition, which may lead to an out-of-bounds READ operation due to a heap-buffer-overflow issue. This occurs because it is possible for the colormap to have fewer than 256 valid values, and...

Astra Linux – vulnerability in libstb

An issue was found in stb stbimage.h 2.27. The PNM loader incorrectly interpreted 16-bit PGM files as 8-bit when converting them to RGBA, resulting in a buffer overflow when the output was later reinterpreted as a 16-bit buffer. An attacker could potentially crash a service using stbimage, or rea...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: The issue in fdt: fix off-by-one error in unflattendtnodes Commit 78c44d910d3e “drivers/of: Fix depth when unflattening devicetree” forgot to fix the depth check in the loop body of unflattendtnodes. This could lead to an overflo...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux

In the Linux kernel, the following vulnerability has been resolved: Tracing: Free buffers when a used dynamic event is removed After 65536 dynamic events have been added and removed, the “type” field of the event then uses the first type number that is available not currently used by other events...

Astra Linux – Vulnerability in aom

It was discovered that AOM v2.0.1 contains a global buffer overflow issue through the component av1/encoder/partitionsearch.h...

Astra Linux – vulnerability in linux-5.15

An issue was found in the Linux kernel prior to version 6.3.4. In ksmbd, the file fs/ksmbd/smb2pdu.c fails to properly validate the UserName value; it disregards the address of the security buffer, resulting in an out-of-bounds read...

Astra Linux – vulnerability in linux-5.15

An issue was found in net/ceph/messengerv2.c within the Linux kernel prior to version 6.4.5. There is an integer signedness error that results in a buffer overflow, enabling remote code execution via the HELLO message or one of the AUTH frames. This occurs due to an untrusted length value extract...

Astra Linux – Vulnerability in binutils

A heap-based buffer overflow issue was discovered in the secmergehashlookup function in merge.c within the Binary File Descriptor BFD library also known as libbfd, as part of the GNU Binutils 2.31. This issue arises due to bfdaddmergesection improperly handling section merges when the size is not...

Astra Linux – vulnerability in nasm

A buffer overflow vulnerability in the hashfindi function within hashtbl.c in nasm 2.15rc0 enables remote attackers to cause a denial of service by using a specially crafted asm file...