8510 matches found
Astra Linux – Vulnerability in TIF format
LibTIFF 4.4.0 contains an out-of-bounds write vulnerability in tiffcrop, located at line 3609 of tools/tiffcrop.c. This vulnerability allows attackers to cause a denial-of-service attack through a malicious TIF file. For users who compile LibTIFF from source code, the fix is available in the comm...
Astra Linux – Vulnerability in imagemagick
A flaw was discovered in ImageMagick within MagickCore/quantum.h. An attacker who submits a crafted file processed by ImageMagick could induce undefined behavior, resulting in values that fall outside the range of types float and unsigned char. This likely leads to a disruption in the application...
Astra Linux – Vulnerability in Chromium
Insufficient policy enforcement in CORS in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
Astra Linux – Vulnerability in netcdf
A issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxmlparsestr performs incorrect memory handling during the parsing of crafted XML files out-of-bounds read after a certain strcspn failure...
Astra Linux – Vulnerability in Vim
Stack-based Buffer Overflow in the GitHub repository for vim/vim before version 9.0.0598...
Astra Linux – Vulnerability in openexr
There is a heap-based buffer overflow vulnerability in Academy Software Foundation OpenEXR 2.3.0, specifically in the chunkOffsetReconstruction function within ImfMultiPartInputFile.cpp. This vulnerability can lead to a denial of service attack through an exploited EXR file...
Astra Linux – Vulnerability in fig2dev
Fig2dev 3.2.7b contains a stack buffer overflow in the bezierspline function in genepic.c...
Astra Linux – Vulnerability in gdk-pixbuf
GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw-compressed stream of image data in GIF files, where the lzw minimum code size is equal to 12...
Astra Linux – Vulnerability in slapi-nis
A flaw was discovered in slapi-nis in versions prior to 0.56.7. A NULL pointer dereferencing during the parsing of the Binding DN could allow an unauthenticated attacker to crash the 389-ds-base directory server. The greatest threat from this vulnerability is to system availability...
Astra Linux – Vulnerability in Thunderbird
The OCSP revocation status of certificates was not checked when verifying S/Mime signatures. Emails signed with revoked certificates would be displayed as having a valid signature. Thunderbird versions from 68 to 102.7.0 were affected by this bug. This vulnerability affects Thunderbird versions...
Astra Linux – Vulnerability in libbpf
A vulnerability was discovered in the Linux kernel. It has been classified as problematic. This issue affects the findprogbysecinsn function in the tools/lib/bpf/libbpf.c file of the BPF component. The vulnerability results in a null pointer derefrence error. It is recommended that a patch be...
Astra Linux – Vulnerability in ntfs-3g
In NTFS-3G versions before version 2021.8.22, when a specially crafted NTFS inode pathname is provided in an NTFS image, a heap buffer overflow may occur, leading to memory disclosure, denial of service, and even code execution...
Astra Linux – Vulnerability in Chromium
Inappropriate implementations of navigation in Google Chrome on Windows prior to version 94.0.4606.54 allowed a remote attacker to inject scripts or HTML into a privileged page through a crafted HTML page...
Astra Linux – Vulnerability in glibc
The iconv program in the GNU C Library also known as glibc or libc6 version 2.31 and earlier, when invoked with multiple suffixes in the destination encoding TRANSLATE or IGNORE along with the -c option, enters an infinite loop when processing invalid multi-byte input sequences, resulting in a...
Astra Linux – Vulnerability in libsdl1.2, libsdl2
The SDL Simple DirectMediaLayer versions from 1.2.15 up to 2.x, and from 2.0.9 up to 2.0.9, have a buffer over-reading issue in the IMAADPCMnibble function in the audio/SDLwave.c file...
Astra Linux – Vulnerability in leptonlib
Leptonica before 1.80.0 allows an over-reading of the heap-based buffer in rasteropGeneralLow, related to adaptmapreg.c and adaptmap.c...
Astra Linux – Vulnerability in Linux, Linux 5.10
“Specifically timed and handcrafted traffic can cause internal errors in a WLAN device, leading to improper Layer 2 Wi-Fi encryption. This may result in information disclosure over the air for a specific set of traffic.” In Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon...
Astra Linux – Vulnerability in Qemu
In QEMU 4.2.1, the ati2dblt function in hw/display/ati2d.c may encounter an out-of-bounds situation during calculations. This could cause the QEMU process to crash...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: tipc: Check for a null pointer after calling kmemdup kmemdup may return a null pointer; therefore, it is necessary to check for this condition. Otherwise, the null pointer will be dereferenced later in tipccryptokeyxmit, as can b...