Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: riscv: stacktrace: Disable KASAN checks for non-current tasks When unwinding the stack of a task other than the current one, KASAN would report “BUG: KASAN: out-of-bounds in walkstackframe+0x41c/0x460” The same issue exists on x8...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-adc161s626: use DMA-safe memory for spiread Add a DMA-safe buffer and use it for spiread instead of stack memory. All SPI buffers must be DMA-safe. Since we only need up to 3 bytes, we simply use a u8 instead of be16...

Astra Linux – vulnerability in gst-plugins-base1.0

In GStreamer up to version 1.26.1, the parsesubriptime function in the subparse plugin may write data beyond the bounds of a stack buffer, resulting in a crash...

Astra Linux – Vulnerability in Linux 5.15

In the efirtasmwrapper of efi-rt-wrapper.S, there is a possible way to bypass shadow stack protection due to a logical error in the code. This could result in a local escalation of privileges without the need for additional execution privileges. User interaction is not required for exploitation...

Astra Linux – vulnerability in linux-5.15

In the Linux kernel, the following vulnerability has been resolved: tracing/eprobes: Do not allow eprobes to use $stack, or % for regs While experimenting with event probes eprobes, I tried to see what would happen if I attempted to retrieve the instruction pointer %rip knowing that event probes ...

Astra Linux – vulnerability in libde265

Libde265 v1.0.8 was found to contain a stack buffer overflow vulnerability in fallback-motion.cc via putqpelfallback. This vulnerability enables attackers to trigger a Denial of Service DoS condition by using a specially crafted video file...

Astra Linux – vulnerability in gst-plugins-base1.0

GStreamer is a library for constructing graphs of media-handling components. A stack buffer overflow has been detected in the gstopusdecparseheader function within gstopusdec.c. The pos array is a stack-allocated buffer of size 64. If nchannels exceeds 64, the for loop will write beyond the...

Astra Linux – vulnerability in vim

Vim versions prior to 9.0.2142 suffer from a stack-based buffer overflow, as didsetlangmap in map.c calls sprintf to write to the error buffer that is passed to the option callback functions...

Astra Linux – vulnerability in linux, linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Wipe sensitive data on failure Sensitive data is also wiped from the stack if copytouser fails...

Astra Linux – vulnerability in linux-5.10, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ipmi: ipmb: validate write message length ipmbwrite reads message fields before validating the length byte. A zero or short write can read uninitialized stack bytes. A length smaller than the SMBus header underflows the block wri...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: hwmon: adm1275: Prevent reading uninitialized stack While adding support for the ROHM BD127X0 hot-swap controllers, Sashiko reported an error in device-name comparison, which can lead to reading uninitialized stack memory. Quotin...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: serialize QUERYDIRECTORY requests per file smb2querydir stores a pointer to its stack-allocated private data in ksmbdfile readdirdata. Concurrent QUERYDIRECTORY requests using the same file handle can overwrite this pointe...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Added a depth limit to indxfindbuffer to prevent stack overflow. indxfindbuffer recursively descends the B+ tree index without a depth limit. A malicious NTFS image with circular index node references causes unbounded...

Astra Linux – Vulnerability in dcmtk

A security vulnerability has been detected in DCMTK up to version 3.6.5. The affected element is the function parseQuota of the component dcmqrscp. Manipulating the argument StorageQuota leads to a stack-based buffer overflow. Local access is required to exploit this vulnerability. The...

Astra Linux – Vulnerability in Golang-1.19

Calling any of the Parse functions in Go source code that contains deeply nested literals can cause a panic due to stack exhaustion...

Astra Linux – Vulnerability in libjettison-java

It was discovered that Jettison before version 1.5.2 contained a stack overflow vulnerability through the map parameter. This vulnerability allows attackers to cause a Denial of Service DoS attack by using a specially crafted string...

Astra Linux – Vulnerability in libxstream-java

XStream is a simple library for serializing objects to XML and back again. This vulnerability may allow a remote attacker to terminate the application with a stack overflow error, resulting in a denial of service—only by manipulating the processed input stream when XStream is configured to use th...

Astra Linux – vulnerability in linux-5.10

In the Linux kernel, the following vulnerability has been resolved: powerpc/32: Fix hard lockup on vmap stack overflow Since the commit c118c7303ad5 “powerpc/32: Fix vmap stack - Do not activate MMU before reading task struct”, a vmap stack overflow results in a hard lockup. This is because...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: MIPS: Do not crash in stacktop for tasks without ABI or vDSO Not all tasks have an associated ABI or a mapped vDSO; for instance, kthreads never do. If such a task calls stacktop, it will dereference the NULL ABI pointer and cras...

Astra Linux – vulnerability in xorg-server

A stack-based buffer overflow vulnerability has been identified in the X.Org X server and Xwayland. An inconsistency between the X server’s maximum allowable length for font names and the libXfont2 library’s limits can lead to a stack buffer overflow during font alias resolution. The server...