101618 matches found
Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: rcu: Avoid stack overflow due to rcuirqenterchecktick being kprobed. Registering a kprobe for rcuirqenterchecktick can cause a kernel stack overflow, as shown below. This issue can be reproduced by enabling CONFIGNOHZFULL and...
Astra Linux – vulnerability in linux-5.10, linux, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: Fix potential stack-out-of-bounds write in ath9kwmirspcallback Fix a stack-out-of-bounds write that occurs in a WMI response callback function called after a timeout occurs in ath9kwmicmd. The callback writes to...
Astra Linux – vulnerability in grub2
A stack overflow flaw was found when reading a BFS file system. A specially crafted BFS file system may lead to an uncontrolled loop, causing grub2 to crash...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: crypto: virtio/akcipher – Fixed a stack overflow issue in memcpy. The value of sizeofstruct virtiocryptoakciphersessionpara is less than sizeofstruct virtiocryptoopctrlreq::u. Copying more bytes from the stack variable leads t...
Astra Linux – vulnerability in libde265
Libde265 v1.0.8 was found to contain a stack buffer overflow vulnerability in fallback-motion.cc, specifically in the void putepelhvfallback function. This vulnerability enables attackers to trigger a Denial of Service DoS condition by using a specially crafted video file...
Astra Linux – Vulnerability in snakeyaml
Those who use Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser runs on user-supplied input, an attacker may provide content that causes the parser to crash due to a stack overflow. This vulnerability could potentially allow for a Denial of...
Astra Linux – Vulnerability in Linux
In the Linux kernel, the following vulnerability has been resolved: openvswitch: Fixed an issue where stack out-of-bounds reading occurred when fragmenting IPv4 packets. When running openvswitch on kernels built with KASAN, it is possible to observe the following error during the testing of IPv4...
Astra Linux – vulnerability in orc
A stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked into processing a specially crafted file using the affected ORC compiler, arbitrary code may be executed on their build environment. This could result in compromise of...
Astra Linux – vulnerability in linux, linux-5.10, linux-5.15, linux-6.1
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: exthdr: fix 4-byte stack OOB write If priv-len is a multiple of 4, then dstlen / 4 can write past the destination array, leading to stack corruption. This construct is necessary to clear the remainder of the...
Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: ip6tunnel: clears skb2-cb in ip4ip6err Oskar Kjos reported the following issue. ip4ip6err calls icmpsend on a cloned skb whose cb was written by the IPv6 receive path as struct inet6skbparm. icmpsend passes IPCBskb2 to...
Astra Linux – vulnerability in nbd
In nbd-server in nbd prior to version 3.24, there is a stack-based buffer overflow. An attacker can trigger a buffer overflow in the parsing of the name field by sending a crafted NBDOPTINFO or NBDOPTGO message containing a large value as the length of the name...
Astra Linux – vulnerability in linux-5.10, linux-6.1
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Bound image count in qla2x00updatefruversions qla2x00updatefruversions copies the user-supplied BSG request into a fixed 256-byte stack buffer bsgDMAPOOLSIZE, then iterates list-count times over the qlaimageversion...
Astra Linux – vulnerability in linux-5.10, linux-6.1
In the Linux kernel, the following vulnerability has been resolved: drm/bridge: tc358767: Clamp the reported AUX read size to the request tcauxtransfer clamps an AUX read to the payload limit: .sizet size = mintsizet, DP Aux MAXPAYLOADBYTES - 1, msg-size; After the transfer, it replaces size with...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: HID: ft260: fix stack-use-after-return write in I2C read race ft260i2cread points dev-readbuf at a caller-supplied buffer often an on-stack variable, arms a completion and waits up to five seconds for the device to return the dat...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read / stack overflow in rtwgetwpsattr rtwgetwpsattr processes WPS attributes within a WPS IE extracted from a wireless management frame. For each attribute candidate, it merely verifies whether the...
Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: ip6mr: Fixed skbunderpanic in ip6mrcachereport. skbuff: skbunderpanic: Text: fffffffff88771f69; Len: 56; Put: -4; Head: ffffff88c0f86a800; Data: fffff887f5f86a850; Tail: 0x88; End: 0x2c0; Device: pim6reg. ----------- Cut here...
Astra Linux – vulnerability in sqlite3
In SQLite 3.30.1, selectExpander in select.c continues to perform WITH stack unwinding even after encountering a parsing error...
Astra Linux – Vulnerability in faad2
A issue was discovered in faad2 through 2.10.0. A stack-buffer-overflow exists in the function ftypin located in mp4read.c. This allows an attacker to cause code execution...
Astra Linux – vulnerability in linux-5.10, linux-5.15, linux
In the Linux kernel, the following vulnerability has been resolved: f2fs: remove WARNON from f2fsisvalidblkaddr Syzbot triggers two WARNs in f2fsisvalidblkaddr and isbitmapvalid. For instance, in f2fsisvalidblkaddr, if type is DATAGENERICENHANCE or DATAGENERICENHANCEREAD, it invokes WARNON when...