Astra Linux – Vulnerability in Chromium

Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file...

Astra Linux – Vulnerability in Chromium

Before version 153.0.8010.36, reading data from out of bounds locations in Google Chrome allowed a remote attacker to read memory outside the sandbox through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: nfc: hci: fixed an out-of-bounds read in HCP header parsing Both nfchcirecvfromllc and ncihcidatareceivedcb read packet-header from skb-data at the function entry without first checking whether the buffer holds at least one...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: ignore explicit helpers under new expectations The existing master conntrack helper should be used; anything else is not truly supported, and it only complicates validation. Therefore, ignore whatever helper...

Astra Linux – Vulnerability in imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, when performing a polynomial distortion, an excessive read of 24 bytes could occur when specifying certain arguments. This issue has been fixed in versions...

Astra Linux – Vulnerability in Chromium

A out-of-bounds read in WebGL in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out-of-bounds memory read via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Redis

Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12, a malicious actor with access to the Valkey clusterbus port could send an invalid packet, causing an out-of-bound read operation, which might lead to the system crashing. The Valkey clusterbus packet...

Astra Linux – Vulnerability in CGal

There are multiple code execution vulnerabilities in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could result in code execution. An attacker can provide malicious input to trigger...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: wcn36xx – Fix for OOB read from short trigger BA firmware response The length of the firmware response is only checked against sizeofrsp 20 bytes. However, when candidatecnt is greater than or equal to 1, a 22-byte candidat...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: drm/virtio: Reads from the bound EDID block into the response buffer. The virtiogetedidblock function only validates the read offset against the resp-size field provided by the device; it never checks against the fixed-size...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: mmc: core: Avoid using the bitfield RMW for control flags related to claims/retunes. Move the control flags related to claims and retunes out of the bitfield to avoid unrelated side effects of RMW in asynchronous contexts. The...

Astra Linux – Vulnerability in Chromium

A out-of-bounds read in Dawn, enabled before 151.0.7922.72, allowed a remote attacker to perform an out-of-bounds memory read through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: netfilter: In the xtables function, there is a issue where walkers that process option data may read the last byte of the option area, which is less than 1 byte long. When the last byte of an option is not a single-byte character...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Staging: rtl8723bs: Fixed issues with OOB reads in IE loops in issueassocreq and joincmdhdl. Two IE parsing loops fail to check the header bounds before dereferencing pIE-length: - In issueassocreq, the pmlmeinfo-network.ies i...

Astra Linux – Vulnerability in SOX

A floating-point exception vulnerability was discovered in sox, within the readsamples function at sox/src/voc.c:334:18. This flaw can lead to a denial of service...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: net/9p: fixed an issue where double requests were sent to p9fdcancelled. Syzkaller reports a KASAN issue as follows: General protection fault, likely due to a non-canonical address 0xfbd59c0000000021: 0000 1 PREEMPT SMP KASAN...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: tpm: Makes TPM character devices non-seekable. TPM character devices expose a sequential command/response interface. However, their open handlers leave FMODEPREAD and FMODEPWRITE enabled. After a command leaves a response pending...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: orangefs: Keep the readdir entry size as 64-bit in fillfrompart. fillfrompart calculates the size of a directory entry using the sizet type, but stores it as an u32 value. A value close to U32MAX causes the entry length to be...

Astra Linux – Vulnerability in libsoup2.4

A flaw was discovered in libsoup. A vulnerability exists in the functions snifffeedorhtml and skipinsignificantspace, which may lead to an over-reading of the heap buffer...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: jfs: Added a check for “read-only” mode before truncating a file in jfstruncatenolock. A check for the “read-only” mode was added to the jfstruncatenolock function to avoid errors when writing to a read-only filesystem. Call stac...