8252 matches found
Astra Linux – Vulnerability in fig2dev
A flaw was discovered in fig2dev. This vulnerability allows for availability through local input manipulation using the gengeitpspline function...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: ipmr: Do not call mrmfcusesdev for unres entries syzbot discovered that calling mrmfcusesdev for unres entries could cause a crash 1. This is because c-mfcun.res.minvif/c-mfcun.res.maxvif aliases “struct skbuffhead unresolved”,...
Astra Linux – Vulnerability in WebKit2GTK
A buffer overflow issue has been addressed through improved memory handling. This issue is fixed in Safari 18.4, iOS 18.4, iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, and watchOS 11.4. Processing maliciously crafted web content may lead to an unexpected process crash...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: tomoyo: Do not emit warnings in tomoyowritecontrol. syzbot reports a “too-large allocation” warning during tomoyowritecontrol. This occurs when a very long line can be written without a newline character. To fix this issue, I use...
Astra Linux – Vulnerability in Chromium
The use of “after free” in USB in Google Chrome before version 135.0.7049.95 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: ksmbd: A missing return value check bug has been fixed. In the smb2sendinterimresp function, if ksmbdallocworkstruct fails to allocate a node, it returns a NULL pointer to the inwork pointer. This can lead to an illegal memory...
Astra Linux – Vulnerabilities in Firefox, Thunderbird, and Expat
In libexpat version 2.6.1, an XML Entity Expansion attack is possible when external parsers are used in isolation created using XMLExternalEntityParserCreate...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: bpf: Fixed a deadlock between rcutaskstrace and eventmutex. Fixed the following deadlock: - CPU A: - freeevent - perfkprobedestroy - mutexlock&eventmutex - perfTraceEventUnreg - synchronizercutaskstrace There are several paths...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: nfp: bpf: Added a check for the return value of nfpappctrlmsgalloc. Added a check on the return value of nfpappctrlmsgalloc in nfpbpfcmsgalloc to prevent null pointer dereferencing...
Astra Linux – Vulnerability in Intel Microcode
Improper input validation in UEFI firmware for some Intel processors may allow a privileged user to potentially enable information disclosure through local access...
Astra Linux – Vulnerability in Cpio
The vulnerability of the parseopt function in the Cpio archiver utility is related to integer overflow. Exploiting this vulnerability allows an attacker to cause a service failure...
Astra Linux – Vulnerability in libcgroup
The vulnerability of the cgroupaddcontroller function in the wrapper.c component of Libcgroup resource management tools is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to cause a service failure...
Astra Linux – Vulnerability in Corosync
The vulnerability of the coroparse.c component of the Corosync cluster engine is related to the use of memory after it is freed. Exploiting this vulnerability allows a perpetrator to cause a service failure...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: scsi: st: Fixed an array overflow issue in stsetup. The array size is now adjusted to match the parameter size, rather than using a fixed value...
Astra Linux – Vulnerability in the 389-DS-base
A denial-of-service vulnerability was discovered in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service when attempting to log in using a user with a malformed hash in their password...
Astra Linux – Vulnerability in WebKit2GTK
This issue has been addressed through improved memory handling. This issue is fixed in Safari 18.5, iOS 18.5, iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, and watchOS 11.5. Processing maliciously crafted web content may lead to an unexpected Safari crash...
Astra Linux – Vulnerability in easy-rsa
The weak encryption algorithm in the Easy-RSA version 3.0.5 to 3.1.7 allows a local attacker to more easily brute-force the private CA key when it is created using OpenSSL 3...
Astra Linux – Vulnerability in WebKit2GTK
The issue was addressed through improved checks. This issue is fixed in Safari 18.5, iOS 18.5, iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, and watchOS 11.5. A malicious website may exfiltrate data across origins...
Astra Linux – Vulnerability in python-h11
h11 is a Python implementation of HTTP/1.1. Prior to version 0.16.0, a lack of strict parsing of line terminators in chunked-coded message bodies in h11 could lead to request smuggling vulnerabilities under certain conditions. This issue has been fixed in version 0.16.0. Since exploiting this...