Astra Linux – vulnerability in qemu

An issue was found in QEMU versions 7.1.0 through 8.2.1. In hw/pci/pciesriov.c, registervfs mishandles the scenario where a guest writes NumVFs exceeding TotalVFs, resulting in a buffer overflow in VF implementations...

Astra Linux – vulnerability in php7.3

In PHP versions 7.4.x prior to 7.4.30, 8.0.x prior to 8.0.20, and 8.1.x prior to 8.1.7, when the pdomysql extension with the mysqlnd driver is used, if a third party is permitted to provide the host and password for the connection, an excessively long password may cause a buffer overflow in PHP,...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Validate CHAPR length before base64 decode chapservercomputehash allocates clientdigest as kzallocchap-digestsize and then, for BASE64-encoded responses, passes chapr directly to chapbase64decode without...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: cpu: hotplug: Bound hotplug states sysfs output statesshow adds CPU hotplug state names into a single sysfs buffer using sprintf. With enough registered states, this can write past the end of the PAGESIZE buffer. Use sysfsemitat ...

Astra Linux – vulnerability in liblivemedia

In liblivemedia version 20200625 from Live Networks, Inc., there is a potential buffer overflow bug in the server’s handling of an RTSP “PLAY” command when the command specifies seeking based on absolute time...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix heap buffer overflow in rtwcfg80211setwpaie supplicantie is a 256-byte array in struct securitypriv. The WPA and WPA2 IE copy paths use: memcpypadapter-securitypriv.supplicantie, &pwpa0, wpaielen + 2; wher...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/adm1266 include PEC byte in pmbusblockxfer read buffer adm1266pmbusblockxfer sets up the read transaction with .buf = data-readbuf, .len = ADM1266PMBUSBLOCKMAX + 2, but readbuf in struct adm1266data is declared as u8...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: The Zero SFP DMA buffer is not zeroed in FRU/I2C bsg handlers. The FRU and I2C bsg handlers stage their transfers in a DMAPOOLSIZE 256-byte buffer, which is obtained through dmapoolalloc. This buffer does not zero...

Astra Linux – Vulnerability in edk2

EDK2 is vulnerable to a vulnerability in the CreateHob function, which allows a user to trigger an integer overflow that leads to a buffer overflow through a local network. Successful exploitation of this vulnerability may result in compromises of confidentiality, integrity, and/or availability...

Astra Linux – vulnerability in musl

In musl libc up to version 1.2.1, wcsnrtombs mishandles certain combinations of destination buffer size and source character limit, as evidenced by an invalid write access buffer overflow...

Astra Linux – vulnerability in libjson-xs-perl

JSON::XS prior to version 4.04 for Perl contains an integer buffer overflow that results in a segmentation fault when parsing specially crafted JSON, potentially enabling denial-of-service attacks or other unspecified impacts...

Astra Linux – Vulnerability in ffmpeg

A buffer overflow vulnerability exists in FFmpeg 4.2 in the movwritevideotag function, due to an out-of-bounds access in the libavformat/movenc.c file. This vulnerability could allow a remote malicious user to obtain sensitive information, cause a Denial of Service, or execute arbitrary code...

Astra Linux – vulnerability in libstb

Stbimage.h also known as the Stb Image Loader version 2.23 contains a heap-based buffer over-read in stbitgaload, which can lead to information disclosure or denial of service...

Astra Linux – vulnerability in libde265

It has been discovered that Libde265 v1.0.14 contains a global buffer overflow vulnerability in the readcodingunit function at slice.cc...

Astra Linux – vulnerability in ffmpeg

A buffer overflow vulnerability exists in FFmpeg 4.2 in filtervertically8 at libavfilter/vfavgblur.c, which could lead to a remote denial of service...

Astra Linux – vulnerability in xrdp

xrdp is an open source project that provides a graphical login to remote machines using the Microsoft Remote Desktop Protocol RDP. xrdp versions prior to 0.9.21 contain a buffer overflow in the xrdploginwndcreate function. No known workarounds exist for this issue; users are advised to upgrade...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux

In the Linux kernel, the following vulnerability has been resolved: ethernet: aeroflex: fix potential skb leak in grethinitrings The grethinitrings function fails to free newly allocated skb when dmamappingerror returns an error; therefore, adding devkfreeskb is required to correct this issue...

Astra Linux – vulnerability in liblouis

A buffer overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service via the compileTranslationTable.c and lousetDataPath functions...

Astra Linux – vulnerability in linux-5.10, linux, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fixed deadloop issue in reading tracepipe A soft lockup occurs when reading the file ‘tracepipe’: watchdog: BUG: soft lockup - CPU6 stuck for 22s! cat:4488 ... RIP: 0010:ringbufferemptycpu+0xed/0x170 RSP:...

Astra Linux – vulnerability in Imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, an attacker who can connect to a magick-distribute-cache service could cause a heap buffer over-read in the server process. This issue has been patched in...