Astra Linux – vulnerability in ffmpeg5

A buffer overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code and cause a denial of service DoS via the afdialoguenhance.c:261:5 in the destereo component...

Astra Linux – vulnerability in ffmpeg5

FFmpeg v.n6.1-3-g466799d4f5 allows memory consumption when using the colorcorrect filter, in the avmalloc function at line 105:9 in libavutil/mem.c...

Astra Linux – vulnerability in linux, linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix potential “struct net” leak in inet6rtmgetaddr It appears that if userspace supplies a valid IFATARGETNETNSID value but no IFAADDRESS or IFALOCAL attributes, inet6rtmgetaddr returns -EINVAL while maintaining an elevated...

Astra Linux – vulnerability in linux, linux-5.10

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Return CQE error if invalid lkey was supplied RXE fails to update the WQE status in cases where LOCALWRITE fails. This resulted in the following kernel panic when an atomic operation was performed using an explicitly...

Astra Linux – Vulnerability in Intel Microcode

A protection mechanism failure in some third- and fourth-generation IntelR XeonR processors, when using IntelR SGX or IntelR TDX, may allow a privileged user to potentially enable privilege escalation through local access...

Astra Linux – Vulnerability in Intel Microcode

The sequence of processor instructions in IntelR CoreTM Ultra Processors may lead to unexpected behaviors. This could potentially allow an authenticated user to enable denial of service through local access...

Astra Linux – Vulnerability in Intel Microcode

Improper input validation in some IntelR TDX module software prior to version 1.5.05.46.698 may allow a privileged user to potentially enable privilege escalation through local access...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: KVM: s390/diag: fixed the issue ofracy access to the physical CPU number in the diag 9c handler. We currently check if the target CPU equals -1, but this may change at a later time when we will use this functionality. We store th...

Astra Linux – Vulnerability in libmodule-scandeps-perl

Qualys discovered that if unsanitized input was used with the Modules::ScanDeps library, before version 1.36, a local attacker could potentially execute arbitrary shell commands by opening a “pesky pipe” e.g., passing “commands|” as a filename or by passing arbitrary strings to the eval function...

Astra Linux – Vulnerability in Intel Microcode

An uncaught exception occurred in the core management mechanism for some IntelR processors. This may allow an authenticated user to potentially enable denial of service through local access...

Astra Linux – Vulnerability in Linux

A issue was discovered in Linux: improper handling of VMIO|VMPFNMAP vmas in KVM can bypass RO checks and cause pages to be freed while still accessible by the VMM and guest. This allows users who have the ability to start and control a VM to read/write random pages of memory, potentially leading ...

Astra Linux – Vulnerability in Linux

A flaw was discovered in the JFS filesystem code within the Linux kernel, which allows a local attacker to cause the system to panic by enabling the ability to set extended attributes. This can lead to memory corruption or an escalation of privileges. The most significant threat posed by this...

Astra Linux – vulnerability in intel-microcode

The non-transparent sharing of return predictor targets between contexts in certain IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...

Astra Linux – Vulnerability in Chromium

Using “after free” in Aura in Google Chrome before version 150.0.7871.128 allowed a local attacker to potentially exploit heap corruption through a malicious file. Chromium security severity: High...

Astra Linux – Vulnerability in Linux

In the rbd block device driver located in drivers/block/rbd.c within the Linux kernel, up to version 5.8.9, incomplete permission checks were used for accessing rbd devices. This could have been exploited by local attackers to map or unmap rbd block devices, specifically the CID-f44d04e696fe devi...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: net: bonding: fix NULL pointer dereference in bonddoioctl In bonddoioctl, slavedev is obtained via devgetbyname, which may return NULL if the requested interface name does not exist. However, the subsequent slavedbg call is place...

Astra Linux - Vulnerability in linux-5.10, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: seg6: reset IP6CB after IPv6 decapsulation decapandvalidate removes the outer SRv6 headers and sets the inner packet as the SKB network header. The IPv6 control block still contains values collected while parsing the outer packet...

Astra Linux – vulnerability in jetty9

In Eclipse Jetty versions 1.0 through 9.4.32.v20200930, 10.0.0.alpha1 through 10.0.0.beta2, and 11.0.0.alpha1 through 11.0.0.beta2O, on Unix-like systems, the system’s temporary directory is shared among all users on that system. A collocated user can observe the process of creating a temporary...

Astra Linux - vulnerability in linux

A flaw was found in how RTAS handles memory access from userspace to kernel communication. On a locked-down guest system running on top of PowerVM or KVM hypervisors pseries platform, a local user with root privileges could exploit this flaw to elevate their privileges to those of a running kerne...

Astra Linux – vulnerability in sqlite3

A flaw was found in SQLite’s SELECT query functionality src/select.c. This flaw allows an attacker capable of executing SQL queries locally on the SQLite database to cause a denial of service or potential code execution by triggering a use-after-free. The primary threat posed by this vulnerabilit...