Astra Linux – Vulnerability in Linux 5.15

In the efirtasmwrapper of efi-rt-wrapper.S, there is a possible way to bypass shadow stack protection due to a logical error in the code. This could result in a local escalation of privileges without the need for additional execution privileges. User interaction is not required for exploitation...

Astra Linux – vulnerability in linux-5.15

In the Linux kernel, the following vulnerability has been resolved: tracing/eprobes: Do not allow eprobes to use $stack, or % for regs While experimenting with event probes eprobes, I tried to see what would happen if I attempted to retrieve the instruction pointer %rip knowing that event probes ...

Astra Linux – vulnerability in libde265

Libde265 v1.0.8 was found to contain a stack buffer overflow vulnerability in fallback-motion.cc via putqpelfallback. This vulnerability enables attackers to trigger a Denial of Service DoS condition by using a specially crafted video file...

Astra Linux – vulnerability in gst-plugins-base1.0

GStreamer is a library for constructing graphs of media-handling components. A stack buffer overflow has been detected in the gstopusdecparseheader function within gstopusdec.c. The pos array is a stack-allocated buffer of size 64. If nchannels exceeds 64, the for loop will write beyond the...

Astra Linux – vulnerability in vim

Vim versions prior to 9.0.2142 suffer from a stack-based buffer overflow, as didsetlangmap in map.c calls sprintf to write to the error buffer that is passed to the option callback functions...

Astra Linux – vulnerability in linux, linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Wipe sensitive data on failure Sensitive data is also wiped from the stack if copytouser fails...

Astra Linux – Vulnerability in Cairo

A flaw was discovered in cairo’s image-compositor.c in all versions prior to 1.17.4. This flaw allows an attacker who can provide a crafted input file to cairo’s image-compositor for example, by convincing a user to open a file in an application that uses cairo, or if an application uses cairo on...

Astra Linux – Vulnerability in dcmtk

A security vulnerability has been detected in DCMTK up to version 3.6.5. The affected element is the function parseQuota of the component dcmqrscp. Manipulating the argument StorageQuota leads to a stack-based buffer overflow. Local access is required to exploit this vulnerability. The...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: AppArmor: The recursive approach used for removing profiles has been replaced with an iterative one. The profile removal code uses recursion when removing nested profiles, which can lead to kernel stack exhaustion and system...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/adm1266 Widens the blackbox-info buffer to I2CSMBUSBLOCKMAX. The function adm1266nvmemreadblackbox declares a 5-byte stack buffer and passes it to i2csmbusreadblockdata to retrieve the 4-byte BLACKBOXINFO response...

Astra Linux – Vulnerability in Golang-1.19

Calling any of the Parse functions in Go source code that contains deeply nested literals can cause a panic due to stack exhaustion...

Astra Linux – Vulnerability in libjettison-java

It was discovered that Jettison before version 1.5.2 contained a stack overflow vulnerability through the map parameter. This vulnerability allows attackers to cause a Denial of Service DoS attack by using a specially crafted string...

Astra Linux – Vulnerability in libxstream-java

XStream is a simple library for serializing objects to XML and back again. This vulnerability may allow a remote attacker to terminate the application with a stack overflow error, resulting in a denial of service—only by manipulating the processed input stream when XStream is configured to use th...

Astra Linux – vulnerability in linux-5.10

In the Linux kernel, the following vulnerability has been resolved: powerpc/32: Fix hard lockup on vmap stack overflow Since the commit c118c7303ad5 “powerpc/32: Fix vmap stack - Do not activate MMU before reading task struct”, a vmap stack overflow results in a hard lockup. This is because...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: MIPS: Do not crash in stacktop for tasks without ABI or vDSO Not all tasks have an associated ABI or a mapped vDSO; for instance, kthreads never do. If such a task calls stacktop, it will dereference the NULL ABI pointer and cras...

Astra Linux – vulnerability in xorg-server

A stack-based buffer overflow vulnerability has been identified in the X.Org X server and Xwayland. An inconsistency between the X server’s maximum allowable length for font names and the libXfont2 library’s limits can lead to a stack buffer overflow during font alias resolution. The server...

Astra Linux – vulnerability in linux-5.10, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Bound image count in qla2x00updatefruversions qla2x00updatefruversions copies the user-supplied BSG request into a fixed 256-byte stack buffer bsgDMAPOOLSIZE, then iterates list-count times over the qlaimageversion...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: HID: ft260: fix stack-use-after-return write in I2C read race ft260i2cread points dev-readbuf at a caller-supplied buffer often an on-stack variable, arms a completion and waits up to five seconds for the device to return the dat...

Astra Linux – vulnerability in linux-5.10, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: tc358767: Clamp the reported AUX read size to the request tcauxtransfer clamps an AUX read to the payload limit: .sizet size = mintsizet, DP Aux MAXPAYLOADBYTES - 1, msg-size; After the transfer, it replaces size with...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read / stack overflow in rtwgetwpsattr rtwgetwpsattr processes WPS attributes within a WPS IE extracted from a wireless management frame. For each attribute candidate, it merely verifies whether the...