Astra Linux – Vulnerability in Firefox

Use-after-free in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 146 and Thunderbird 146...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Source read access is required for duplicate extents. The FSCTLDUPLICATEEXTENTSTOFILE function passes the source file directly to vfsclonefilerange or vfscopyfilerange, without checking the SMB access mask granted to the...

Astra Linux – Vulnerability in pillow

A issue was discovered in Pillow before version 8.2.0. PSDImagePlugin.PsdImageFile lacked a sanity check on the number of input layers relative to the size of the data block. This could lead to a denial-of-service attack on Image.open prior to Image.load...

Astra Linux – Vulnerability in Samba

Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability...

Astra Linux – Vulnerability in Samba

Windows Kerberos Elevation of Privilege Vulnerability...

Astra Linux – Vulnerability in Chromium

In the version of Payments in Google Chrome prior to 153.0.8010.36, race conditions allowed a remote attacker to leverage social engineering to spoof UI elements through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Redis

Redis is an in-memory database that persists data on disk. Upon startup, Redis begins listening on Unix sockets before adjusting its permissions according to the user-provided configuration. If a permissive umask value is used, this can create a race condition that allows another process to...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/omap: dsi: Do not copy the isr table. To be able to unregister objects from isr tables, the corresponding table was copied. However, no one seems to use this method to unregister objects, so it doesn’t provide any real benefi...

Astra Linux – Vulnerability in Chromium

A stack buffer overflow in Printing in Google Chrome prior to version 92.0.4515.107 allowed a remote attacker who had compromised the renderer process to potentially exploit stack corruption through a crafted HTML page...

Astra Linux – Vulnerability in Mariadb 10.3

It has been discovered that MariaDB Server v10.9 and earlier contains a segmentation fault due to the component sql/sqlwindow.cc...

Astra Linux – Vulnerability in Chromium

The information leak in Scroll in Google Chrome prior to version 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to leak cross-origin data through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

UI representation errors in sessions of Google Chrome prior to version 153.0.8010.36 allowed a remote attacker to spoof UI elements through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Using “after free” in DevTools in Google Chrome before version 153.0.8010.36 allowed a remote attacker to leverage social engineering to execute arbitrary code within the sandbox through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: iouring/afunix: disabling the sending of iouring via sockets File reference cycles have caused many problems for iouring in the past. It still doesn’t work correctly, and it causes race conditions with unixstreamreadgeneric. The...

Astra Linux – Vulnerability in Chromium

A observable discrepancy in the layout of Google Chrome prior to version 153.0.8010.36 allowed a remote attacker to leak sensitive information through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Apache2

A regression in Apache HTTP Server 2.4.60 ignores some uses of the legacy content-type-based configuration for handlers. Configurations like “AddType” and similar settings, under certain circumstances where files are requested indirectly, can lead to exposure of local content in the source code...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: - phonet: pep: fixed a use-after-free in pepgetsb pepgetsb does not consider that pskbmaypull might have relocated the skb data, and continues to access the older pointer, resulting in a Use-After-Free UAF error. - Reproduced...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fixed the issue of BO-pin leaking in amdgpubocreatereserved. The amdgpubocreatereserved function only allocates a new BO when boptr struct amdgpubo boptr as the input parameter is NULL. If boptr is not NULL, the...

Astra Linux – Vulnerability in Firefox

Uploading files that contain symlinks may have allowed an attacker to trick a user into submitting sensitive data to a malicious website. This vulnerability affects Firefox 115...

Astra Linux – Vulnerability in mbedtls

Mbed TLS versions prior to 3.6.4 allow a use-after-free in certain situations of applications developed in accordance with the documentation. The function mbedtlsx509stringtonames takes a head argument, which is documented as an output argument. The documentation does not indicate that the functi...