Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: misc: ibmasm: fix OOB MMIO read in ibmasmhandlemouseinterrupt ibmasmhandlemouseinterrupt performs an out-of-bounds MMIO read when the queue reader or writer index from hardware exceeds REMOTEQUEUESIZE 60. A compromised service...

Astra Linux – vulnerability in Imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, when performing a polynomial distortion, an out-of-bounds read of 24 bytes could occur when specifying certain arguments. This issue has been fixed in versions...

Astra Linux – vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.27.0, the glyphcacheget function in libfreerdp/cache/glyph.c checked whether the index was greater than cache-number rather than greater than or equal to it. A malicious RDP server can exploit GLYPHFRAGMENTUSE...

Astra Linux – vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.27.0, FreeRDP’s H.264 decoder backends could return YUV planes derived from the bitstream without first comparing the decoded width and height to the RDPGFX surface dimensions used for validating region rectangles...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate Add Extended Advertising Data length MGMTOPADDEXTADVDATA is registered as a variable-length command, with MGMTADDEXTADVDATASIZE as the fixed header size. The handler then uses cp-advdatalen and...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Validate XDomain request packet size before type cast tbxdphandlerequest casts the received packet buffer to protocol-specific structs without verifying that the allocation is large enough for the target type. A peer...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Validate GPIO pin LUT table size before iterating Why&How The GPIO pin table parsers in getgpioi2cinfo and biosparsergetgpiopininfo derive an element count from the VBIOS tableheader.structuresize field, then...

Astra Linux – vulnerability in Imagemagick

ImageMagick versions prior to 7.1.2-15 and 6.9.x prior to 6.9.13-40 contain an integer overflow in the PSB PSD v2 RLE decoding path ReadPSDChannelRLE in coders/psd.c, which results in a heap out-of-bounds read on 32-bit builds. Processing a specially crafted PSB file may lead to information...

Astra Linux – vulnerability in Imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, the MAT decoder used 32-bit arithmetic due to improper parentheses, leading to a heap over-read. This vulnerability has been fixed in 7.1.2-16 and 6.9.13-41...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: validate skb length in MCC handlers The RFCOMM MCC handlers cast skb-data to protocol-specific structs without first validating skb-len. A malicious remote device can send truncated MCC frames and trigger...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: wifi: b43legacy: enforce bounds check on firmware key index in RX path The same fix as in b43: the firmware-controlled key index in b43legacyrx can exceed dev-maxnrkeys. The existing B43legacyWARNON is non-enforcing in production...

Astra Linux – vulnerability in xrdp

xrdp is an open source RDP server. Versions up to and including 0.10.5 contain an out-of-bounds read vulnerability during the RDP capability exchange phase. The issue arises when memory is accessed before verifying the remaining buffer length. A remote, unauthenticated attacker can exploit this...

Astra Linux – vulnerability in Imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, when writing an IPTC output file, a malicious input file could cause an out-of-bounds read of a single byte. This issue has been patched in versions 6.9.13-47 a...

Astra Linux – vulnerability in krb5

In MIT Kerberos 5 also known as krb5 versions prior to 1.22.3, an integer underflow leads to an out-of-bounds read when an application calls gssacceptseccontext on a system where a NegoEx mechanism is registered at /etc/gss/mech. An unauthenticated remote attacker can exploit this vulnerability,...

Astra Linux – vulnerability in Apache2

Out-of-bounds read vulnerability in modproxyajp of Apache HTTP Server. This issue affects Apache HTTP Server versions up to and including 2.4.66. Users are advised to upgrade to version 2.4.67, which fixes the issue...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: properly validate the data in rtwgetieex Just like in commit 154828bf9559 “staging: rtl8723bs: fix out-of-bounds read in rtwgetie parser”, we don’t trust the data in the frame so we should check the length...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: slip: bound decode reads against the compressed packet length slhcuncompress parses a VJ-compressed TCP header by advancing a pointer through the packet via decode and pull16. Neither helper bounds-checks against isize, and decod...

Astra Linux – vulnerability in Apache2

Buffer over-read vulnerability in Apache HTTP Server caused by outbound OCSP requests to an attacker-controlled OCSP server This issue affects Apache HTTP Server versions 2.4.0 through 2.4.67. Users are advised to upgrade to version 2.4.68, which resolves the issue...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: HID: asus: avoid memory leak in asusreportfixup The asusreportfixup function was returning a newly allocated kmemdup-allocated buffer, but never freeing it. Switch to devmkzalloc to ensure the memory is managed and freed...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: Squashfs: verify that the metadata block offset is within range Syzkaller reports a “general protection fault in squashfscopydata” This is ultimately caused by a corrupted index lookup table, which results in a negative metadata...