Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Validating the payload size in the IPC response When installing malicious ksmbd-tools, ksmbd.mountd may return an invalid IPC response to the ksmbd kernel server. ksmbd should validate the payload size of the IPC response...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: fs/buffer: Fixed an issue where a use-after-free occurred when calling bhread helper functions. There is one issue as follows: BUG: KASAN: Stack out-of-bounds condition in endbufferreadsync+0xe3/0x110. A size 8 read was performed...

kernel: wifi: mac80211: fix MLE defragmentation

A flaw was found in the Linux kernel's mac80211 Wi-Fi subsystem. This vulnerability arises from incorrect handling of Multi-Link Element MLE defragmentation. When a reconf or EPCS Enhanced Power Save MLE is present in a non-transmitted profile, the defragmentation routine uses an incorrect pointe...

kernel: Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend

A flaw was found in the Bluetooth subsystem of the Linux kernel, specifically within the hcisync component. This vulnerability occurs when the hciadvbcastannoucement function attempts to prepend Broadcast Announcement service data to an existing advertising payload that is already at its maximum...

CVE-2023-24284

Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the ismarkable function...

CVE-2023-24285

Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow which is triggered when an unusually long move is executed...

CVE-2023-24286

Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the game description parameter...

CVE-2023-24291

Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the record length parameter...

UBUNTU-CVE-2023-24291

Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the record length parameter...

CVE-2023-24288

An issue in Portable Puzzle Collection before 20230116.5782e29 allows attackers to cause a Denial of Service DoS via creating an excessive amount of save states...

UBUNTU-CVE-2023-24285

Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow which is triggered when an unusually long move is executed...

UBUNTU-CVE-2023-24288

An issue in Portable Puzzle Collection before 20230116.5782e29 allows attackers to cause a Denial of Service DoS via creating an excessive amount of save states...

UBUNTU-CVE-2023-24287

Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the "M" command...

UBUNTU-CVE-2023-24284

Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the ismarkable function...

UBUNTU-CVE-2023-24286

Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the game description parameter...

UBUNTU-CVE-2023-24283

Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow which allows attackers to cause a Denial of Service DoS via a crafted save file...

CVE-2023-24283

Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow which allows attackers to cause a Denial of Service DoS via a crafted save file...

CVE-2023-24291

Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the record length parameter...

CVE-2023-24286

Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the game description parameter...

CVE-2023-24285

Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow which is triggered when an unusually long move is executed...