Astra Linux – Vulnerability in cups

The vulnerability of the copystack function in the CUPS printing server relates to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

Astra Linux – Vulnerability in libxml2

There is a flaw in libxml2’s xmllint in versions before 2.9.11. An attacker who can submit a crafted file for processing by xmllint could trigger a use-after-free. The most significant impact of this flaw is on confidentiality, integrity, and availability...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: can: vxcan: vxcanxmit: fix use after free bug After calling netifrxniskb, dereferencing the skb is unsafe. In particular, the canfdframe structure, which aliases skb memory, is accessed after the netifrxni function...

Astra Linux – Vulnerability in Chromium

Before version 101.0.4951.41, using the Browser Switcher in Google Chrome allowed a remote attacker to potentially exploit heap corruption by using a crafted HTML page, as long as that attacker could convince a user to perform certain user interactions...

Astra Linux – Vulnerability in Chromium

Before version 101.0.4951.41, using free after development tools in Google Chrome allowed a remote attacker to potentially exploit heap corruption through specific and direct user interactions...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: phylib: fixed potential use-after-free issues. The commit bafbdd527d56 “phylib: Added support for device reset GPIO” includes a call to phydeviceresetphydev after the putdevice call in phydetach. The comment before the putdevice...

Astra Linux – Vulnerability in Vim

Vim is vulnerable to Use After Free vulnerabilities...

Astra Linux – Vulnerability in Chromium

Using “after free” in the Browser History of Google Chrome before version 100.0.4896.75 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chrome security severity: High...

Astra Linux – Vulnerability in Vim

This issue was used after the “free” keyword in the appendcommand function in the GitHub repository’s Vim/Vim version prior to 8.2.4895. This vulnerability can cause software to crash, as it involves bypassing the protection mechanism, modifying memory, and potentially enabling remote execution...

Astra Linux – Vulnerability in Vim

Use After Free in the GitHub repository vim/vim before version 8.2...

Astra Linux – Vulnerability in Linux, Linux 5.10

In socksocknested of sock.c, there is a potential exploit after the free function due to a race condition. This could lead to a local escalation of privileges, as the execution privileges required by the system are involved. User interaction is not required for this exploitation. Product: Android...

Astra Linux – Vulnerability in libxml2

In libxml2 version 2.9.13, the valid.c file contains a use-after-free issue with the ID and IDREF attributes...

Astra Linux – Vulnerability in Firefox

Removing an XSLT parameter during processing could lead to an exploitable use-after-free vulnerability. There have been reports of attacks exploiting this flaw in the wild. This vulnerability affects Firefox 97.0.2, Firefox ESR 91.6.1, Firefox for Android 97.3.0, Thunderbird 91.6.2, and Focus...

Astra Linux – Vulnerability in Linux 5.10

A use-after-free flaw was discovered in the addpartition function in the block/partitions/core.c file within the Linux kernel. A local attacker with user privileges could cause a denial of service on the system. The issue arises due to the lack of code cleanup when the deviceadd function fails...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: xdp, net: Fix use-after-free in bpfxdplinkrelease The problem occurs between devgetbyindex and devxdpattachlink. At this point, devxdpuninstall is called. Then xdp link will not be detached automatically when dev is released. But...

Astra Linux – Vulnerability in WebKit2GTK

In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::Frame::page, a different vulnerability than CVE-2021-30889...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel before version 5.15.3, fs/quota/quotatree.c does not validate the block number in the quota tree on disk. This can, for example, lead to a kernel/locking/rwsem.c use-after-free if there is a corrupted quota file...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Net: FDDI – Fixed a UAF Use-after-Free issue in fzaprobe. “FP” is netdev private data, and it cannot be used after the freenetdev call. Using “FP” after freenetdev can cause a UAF bug. This issue was fixed by moving the freenetde...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: fixed a use-after-free in twtimerhandler A real-world panic issue was discovered in Linux 5.4. The details of the issue are as follows: - Bug: Unable to handle a page fault for the address: ffffde49a863de28 - Memory layout:...

Astra Linux – Vulnerability in Chromium

Before version 100.0.4896.88, using the "after free" feature in regular expressions in Google Chrome allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...