14686 matches found
Astra Linux – Vulnerability in libde265
It was discovered that Libde265 v1.0.8 contains a segmentation violation due to the use of applysaointernal in sao.cc. This vulnerability allows attackers to cause a Denial of Service DoS attack through a crafted video file...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerabilities have been resolved: nsh: Added skb-protocol, data, macheader to the outer header in nshgsosegment. The syzbot triggered various errors by using a crafted GSO packet in VIRTIONETHDRGSOUDP, which layered the following protocols: ETHP8021AD + ETHPNS...
Astra Linux – vulnerability in libde265
The strukturag libde265 commit d9fea9d was found to contain a segmentation fault caused by the component decodercontext::computeframedroptable function...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: mptcp: handle large GSO sizes Following the aforementioned commit, TCP sockets and MPTCP subflows can generate egress packets exceeding 64K. This exceeds the maximum DSS data size; the length is misrepresented over the wire,...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: net: correctly handle tunneled traffic on IPV6CSUM GSO fallback NETIFFIPV6CSUM only advertises support for checksum offload of packets without IPv6 extension headers. Packets with extension headers must fall back onto software...
Astra Linux – Vulnerability in Samba
A flaw was discovered in Samba. Users of Samba AD can cause the server to access uninitialized data through an LDAP add or modify request, typically resulting in a segmentation fault...
Astra Linux – vulnerability in linux-5.10, linux-5.15, linux-6.1
In the Linux kernel, the following vulnerability has been resolved: sctp: linearize cloned gso packets in sctprcv A cloned head skb still shares these frag skbs in the fraglist with the original head skb. It is not safe to access these frag skbs. SyZBot reported two use-of-uninitialized-memory bu...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: udp: fixed a potential use-after-free issue in tunnel segmentation. The skbudptunnelsegment function retrieves the UDP header before ensuring that the tunnel header is in the skb structure. If the skb structure is reallocated aft...
Astra Linux – Vulnerability in exiv2
An invalid memory address dereferencing was discovered in the Exiv2::DataValue::read method in value.cpp in Exiv2 0.26. This vulnerability causes a segmentation fault and an application crash, resulting in a denial of service...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: netsched: schsfq: Fixed a potential crash during handling of gsoskb. SFQ assumes that it is always able to queue at least one packet. However, after the committed change, sch-q.len can be inflated by packets in sch-gsoskb. An...
Astra Linux – Vulnerability in Linux, Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: nfc: fixed a segfault in nfcgenldumpdevicesdone When kmalloc in nfcgenldumpdevices fails, nfcgenldumpdevicesdone causes a segfault as follows: KASAN: null-ptr-deref in range 0x0000000000000008-0x000000000000000f CPU: 0 PID: 25...
Astra Linux – Vulnerability in Mariadb 10.3
It has been discovered that MariaDB Server v10.9 and earlier contain a segmentation fault through the component sql/itemcmpfunc.cc...
Astra Linux – vulnerability in tiff
A segment fault SEGV flaw was found in libtiff; it can be triggered by passing a specially crafted TIF file to the TIFFReadRGBATileExt API. This flaw enables a remote attacker to cause a heap buffer overflow, resulting in a denial of service...
Astra Linux – vulnerability in linux-5.10, linux-5.15, linux
In the Linux kernel, the following vulnerability has been resolved: md/bitmap: do not set sb values if they cannot pass sanity check If the bitmap area contains invalid data, the kernel will crash; then mdadm triggers “Segmentation fault”. This is a special bug in cluster-md. In non-clustered...
Astra Linux – vulnerability in linux-5.10, linux-5.15, linux-6.1
In the Linux kernel, the following vulnerability has been resolved: net: add more sanity checks to qdiscpktleninit One path handles the SKBGSODODGY condition by checking that skb-len is greater than hdrlen. virtionethdrtoskb does not fully dissect TCP headers; it merely ensures they are at least ...
Astra Linux – Vulnerability in libde265
Libde265 v1.0.4 contains a segmentation fault in the applysaointernal function, which can be exploited through a properly crafted file...
Astra Linux - Vulnerability in mariadb-10.3
A segmentation fault was discovered in MariaDB versions 10.2 through 10.7 in the component Exectimetracker::getloops/Filesorttracker::reportuse/filesort...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: Net: Fixing segmentation issues with forwarding fraglists for GRO packets. This patch improves the handling of GSO segmentation by properly checking the SKBGSODODGY flag for GSO packets with a fraglist. This addresses low...