101585 matches found
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: pcie: handle randbuf allocation failure The kzalloc in brcmfpciedownloadfwnvram returns null when physical memory runs out. Consequently, if we use getrandombytes to generate random bytes into randbuf, a null...
Astra Linux – vulnerability in linux-6.1, linux-5.10, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix uninit-value access in ipmakeskb KMSAN reported uninit-value access in ipmakeskb 1. ipmakeskb tests HDRINCL to determine whether the skb contains an icmphdr. However, HDRINCL can lead to a race condition. If calling...
Astra Linux – vulnerability in linux-6.1, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: sched/taskstack: fix objectisonstack for KASAN tagged pointers When CONFIGKASANSWTAGS and CONFIGKASANSTACK are enabled, the objectisonstack function may produce incorrect results due to the presence of tags in the obj pointer,...
Astra Linux – vulnerability in fig2dev
A flaw was found in xfig. This vulnerability allows potential code execution via local input manipulation through the bezierspline function...
Astra Linux – Vulnerability in binutils
A issue was discovered in cp-demangle.c within GNU libiberty, as part of the GNU Binutils 2.31 package. This issue involves stack exhaustion during the C++ demangling functions provided by libiberty. There is also a stack consumption problem caused by recursive stack frames: cplusdemangletype,...
Astra Linux – vulnerability in linux-5.10, linux, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: qcom: Fix potential memory leak The function dwc3qcomprobe allocates memory for a resource structure pointed to by the parentres pointer. This memory is not freed, resulting in a memory leak. Use stack memory to preven...
Astra Linux – vulnerability in musl
Musl libc up to version 1.1.23 contains an imbalance in the x87 floating-point stack adjustment, which is related to the math/i386/ directory. In some cases, using this library may result in out-of-bounds writes that are not present in the application’s source code...
Astra Linux – Vulnerability in opensc
Buffer overflow issues were identified in Opensc before version 0.22.0 in various locations, which could potentially cause programs using the library to crash...
Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: wifi: brcmfmac: Ensure that the CLM version is terminated with null characters to prevent a stack-out-of-bounds issue. A stack-out-of-bounds read in brcmfmac occurs when a buffer that is not terminated with null characters is...
Astra Linux – vulnerability in isc-dhcp
In ISC DHCP 4.1-ESV-R1 - 4.1-ESV-R16, ISC DHCP 4.4.0 - 4.4.2 Other branches of ISC DHCP, such as releases in the 4.0.x series or earlier, and releases in the 4.3.x series, are beyond their End-of-Life and no longer supported by ISC. Upon inspection, it is evident that this flaw also exists in...
Astra Linux – vulnerability in Chromium
A stack buffer overflow in Printing in Google Chrome prior to version 92.0.4515.107 allowed a remote attacker who had compromised the renderer process to potentially exploit stack corruption via a crafted HTML page...
Astra Linux – Vulnerability in connman
ConnMan also known as Connection Manager versions 1.30 to 1.39 have a stack-based buffer overflow issue in the uncompress function of dnsproxy.c, occurring due to the use of NAME, RDATA, or RDLENGTH fields for the A or AAAA records...
Astra Linux – Vulnerability in expat
In Expat also known as libexpat, before version 2.4.5, an attacker could trigger stack exhaustion in buildmodel by using a large nesting depth in the DTD element...
Astra Linux – Vulnerability in Linux, Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: initialize registers in nftdochain The registers were initialized to prevent a stack leak into the user space...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: sched/scs: The task stack state is reset in bringupcpu. When a CPU is hot-plugged, the idle task on that CPU calls several layers of C code before finally leaving the kernel. When KASAN is in use, a “poisoned” shadow is left behi...
Astra Linux – vulnerability in libxstream-java
XStream serializes Java objects to XML and back again. Versions prior to 1.4.20 may allow a remote attacker to terminate the application via a stack overflow error, resulting in a denial of service by manipulating the processed input stream. The attack exploits the hash code implementation for...
Astra Linux – vulnerability in libjettison-java
A stack overflow in Jettison prior to version 1.5.2 enables attackers to trigger a Denial of Service DoS condition by using specially crafted JSON data...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlinkosf: fixed a possible incorrect match in nfosffind. nfosffind incorrectly returns true in case of a mismatch, which leads to copying uninitialized memory areas in nftosf. This can result in leaking stale kerne...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: bpf: Fixed pointer-leak due to insufficient speculative store bypass mitigation To mitigate Spectre v4, the patch 2039f26f3aca “bpf: Fixed leakage due to insufficient speculative store bypass mitigation” includes instructions...