Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: xfrm: fixed the race condition in ipRtbug for icmpRouteLookup reverse path icmpRouteLookup performs multiple route lookups to find a suitable route for sending ICMP error messages, with special handling for XFRM IPsec policies. T...

Astra Linux – vulnerability in intel-microcode

Improper input validation in UEFI firmware for certain IntelR processors may allow a privileged user to potentially enable privilege escalation via local access...

Astra Linux – Vulnerability in Intel Microcode

Improper input validation in the XmlCli feature for UEFI firmware on some Intel processors may allow a privileged user to potentially enable privilege escalation through local access...

Astra Linux – Vulnerability in Mariadb 10.3

MariaDB Server before version 10.7 is vulnerable to Denial of Service attacks. In the file extra/mariabackup/dscompress.cc, when an error occurs pthreadcreate returns a non-zero value during the execution of the createworkerthreads method, the held lock is not released properly. This allows local...

Astra Linux - vulnerability in linux

In various methods of kernel base drivers, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to local privilege escalation requiring System execution privileges. No user interaction is required for exploitation. Product: Android Versions: Android kernel Androi...

Astra Linux - vulnerability in screen

In GNU Screen versions up to 4.9.0, socket.c is setuid or setgid the default on platforms such as Arch Linux and FreeBSD when installed. This allows local users to send a privileged SIGHUP signal to any PID, resulting in a denial of service or disruption of the target process...

Astra Linux – vulnerability in util-linux

Util-linux is a collection of various Linux utilities. Prior to version 2.41.4, a TOCTOU Time-of-Check-Time-of-Use vulnerability was identified in the SUID binary /usr/bin/mount within util-linux. When setting up loop devices, the mount binary validates the source file path using user privileges...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: tools/power/x86/intel-speed-select: Harden daemon pidfile opening Avoid clobbing of pidfile files based on symlinks by opening the pidfile with ONOFOLLOW and validating it using fstat before locking/writing it. The daemon current...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

This vulnerability allows local attackers to disclose sensitive information on affected installations of the Linux Kernel 6.0-rc2. An attacker must first gain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw resides within...

Astra Linux – Vulnerability in Linux 5.10

The nftablesnewset function in net/netfilter/nftablesapi.c in the Linux kernel before version 5.12.13 allows local users to cause a denial of service due to NULL pointer dereferencing and general protection faults, caused by the absence of initialization for nftsetelemexpralloc. A local user can...

Astra Linux - vulnerability in linux

A race condition and improper initialization of the process ID vulnerability was identified in the Linux kernel’s handling of child/parent process identification during signal handler filtering. A local attacker can exploit this flaw to bypass checks and send any signal to a privileged process...

Astra Linux – Vulnerability in ffmpeg, ffmpeg5

The Ffmpeg v.N113007-g8d24a28d06 contains a buffer overflow vulnerability that allows a local attacker to execute arbitrary code through libavfilter/afstereowiden.c:120:69...

Astra Linux – vulnerability in intel-microcode

Improper initialization in the UEFI firmware OutOfBandXML module on certain IntelR processors may allow a privileged user to potentially enable information disclosure via local access...

Astra Linux – Vulnerability in Intel Microcode

Improper access control in the EDECCSSA user leaf function for certain IntelR Processors with IntelR SGX may allow an authenticated user to potentially enable denial of service through local access...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: dsa: clean up FDB, MDB, and VLAN entries when unbinding them. As explained in many places, such as commit b117e1e8a86d “net: dsa: delete dsalegacyfdbadd and dsalegacyfdbdel”, DSA is written under the assumption that higher...

Astra Linux – Vulnerability in edk2

Null pointer dereferencing in Tianocore EDK2 may allow an authenticated user to potentially enable privilege escalation through local access...

Astra Linux – Vulnerability in Linux-Firmware

A null pointer reference exists in some IntelR Graphics Drivers for Windows prior to version 26.20.100.7212, as well as prior to the release of the Linux kernel version 5.5. This vulnerability could allow a privileged user to exploit the system to cause a denial of service through local access...

Astra Linux – Vulnerability in sane-backends

A heap buffer overflow in SANE backends before version 1.0.30 may allow a malicious device connected to the same local network as the victim to execute arbitrary code, known as GHSL-2020-084...

Astra Linux – Vulnerability in Intel Microcode

Observable timing discrepancies in some Intel processors may allow an authenticated user to potentially enable information disclosure through local access...

Astra Linux – Vulnerability in Firefox, Thunderbird

Using techniques based on slipstream research, a malicious webpage could scan both the hosts of an internal network and the services running on the user’s local machine, using WebRTC connections. This vulnerability affects Firefox ESR 78.9, Firefox 87, and Thunderbird 78.9...