Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: BPF, sockmap: Do not allow sockmapclose,destroy,unhash to call itself. Proto callback functions in sockmap should never call themselves by design. Protect against bugs like 1 and break out of the recursive loop to avoid a stac...

Astra Linux – vulnerability in exempi

The XMP Toolkit SDK version 2020.1 and earlier is affected by a stack-based buffer overflow vulnerability that could potentially lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction; a victim must open a specially crafted file...

Astra Linux – vulnerability in libmodbus

The stack-based buffer overflow vulnerability in libmodbus v3.1.10 allows the buffer allocated for Modbus responses to be overflowed when the function attempts to respond to a Modbus request with an unexpected length...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cfg80211: The PMK parameter is now passed as binary data, rather than hexadecimal data. It appears that the hexadecimal passphrase mechanism does not work on newer chips/firmwares e.g., BCM4387. There was actually...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: serialize QUERYDIRECTORY requests per file smb2querydir stores a pointer to its stack-allocated private data in ksmbdfile readdirdata. Concurrent QUERYDIRECTORY requests using the same file handle can overwrite this pointe...

Astra Linux – vulnerability in zeromq3

A flaw was found in the ZeroMQ server in versions prior to 4.3.3. This flaw enables a malicious client to trigger a stack buffer overflow on the server by sending specially crafted topic subscription requests followed by unsubscription. The primary risks associated with this vulnerability are...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Prevent stack buffer overflow caused by kernel command line Although the kernel command line is considered trusted in most environments, be cautious of writing 1 byte beyond the end of “acpiid” when the “str” argument...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: dccp: copying the entire header to the stack buffer, not just the basic header Eric Dumazet states that: nfconntrackdccppacket has a unique mechanism: dh = skbheaderpointerskb, dataoff, sizeofdh, &dh; And...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

A NULL pointer dereference flaw was discovered in the Linux kernel’s ipv4 stack. The socket buffer skb was assumed to be associated with a device before calling ipoptionscompile. However, this assumption does not always hold if the skb is rerouted by ipvs. This issue may allow a local user with...

Astra Linux – vulnerability in golang-1.19

Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion...

Astra Linux – vulnerability in linux-5.10, linux, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmfcpreinitdcmds This patch fixes a stack-out-of-bounds read in brcmfmac that occurs when 'buf' that is not null-terminated is passed as an argument of strsep in...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: riscv: stacktrace: Disable KASAN checks for non-current tasks When unwinding the stack of a task other than the current one, KASAN would report “BUG: KASAN: out-of-bounds in walkstackframe+0x41c/0x460” The same issue exists on x8...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Added a depth limit to indxfindbuffer to prevent stack overflow. indxfindbuffer recursively descends the B+ tree index without a depth limit. A malicious NTFS image with circular index node references causes unbounded...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-adc161s626: use DMA-safe memory for spiread Add a DMA-safe buffer and use it for spiread instead of stack memory. All SPI buffers must be DMA-safe. Since we only need up to 3 bytes, we simply use a u8 instead of be16...

Astra Linux – vulnerability in gst-plugins-base1.0

In GStreamer up to version 1.26.1, the parsesubriptime function in the subparse plugin may write data beyond the bounds of a stack buffer, resulting in a crash...

Astra Linux – Vulnerability in Linux 5.15

In the efirtasmwrapper of efi-rt-wrapper.S, there is a possible way to bypass shadow stack protection due to a logical error in the code. This could result in a local escalation of privileges without the need for additional execution privileges. User interaction is not required for exploitation...

Astra Linux – vulnerability in linux-5.15

In the Linux kernel, the following vulnerability has been resolved: tracing/eprobes: Do not allow eprobes to use $stack, or % for regs While experimenting with event probes eprobes, I tried to see what would happen if I attempted to retrieve the instruction pointer %rip knowing that event probes ...

Astra Linux – vulnerability in libde265

Libde265 v1.0.8 was found to contain a stack buffer overflow vulnerability in fallback-motion.cc via putqpelfallback. This vulnerability enables attackers to trigger a Denial of Service DoS condition by using a specially crafted video file...

Astra Linux – vulnerability in gst-plugins-base1.0

GStreamer is a library for constructing graphs of media-handling components. A stack buffer overflow has been detected in the gstopusdecparseheader function within gstopusdec.c. The pos array is a stack-allocated buffer of size 64. If nchannels exceeds 64, the for loop will write beyond the...

Astra Linux – vulnerability in vim

Vim versions prior to 9.0.2142 suffer from a stack-based buffer overflow, as didsetlangmap in map.c calls sprintf to write to the error buffer that is passed to the option callback functions...