Astra Linux – Vulnerability in LibreOffice

Improper digital signature invalidation vulnerability in the Zip Repair Mode of The Document Foundation’s LibreOffice library allows for signature forgery vulnerabilities in LibreOffice. This issue affects LibreOffice versions starting from 24.2 before 24.2.5...

Astra Linux – Vulnerability in OpenSSH

OpenSSH versions 9.5 through 9.7 before 9.8 sometimes allow timing attacks against password entry processes such as echo-off password input e.g., for su and Sudo, due to a logical error in the ObscureKeystrokeTiming mechanism. Similarly, other timing attacks against keystroke input operations may...

Astra Linux – Vulnerability in libvirt

A flaw was discovered in libvirt. A refactoring of the code that retrieves the list of interfaces for multiple APIs introduced a corner case on platforms where allocating 0 bytes of memory results in a NULL pointer. This corner case could lead to a NULL pointer being dereferenced, causing the...

Astra Linux – Vulnerability in Firefox, Thunderbird

The date picker may partially obscure security prompts. A malicious site could use this feature to trick users into granting permissions. This vulnerability affects Firefox 129, Firefox ESR 115.14, Firefox ESR 128.1, Thunderbird 128.1, and Thunderbird 115.14...

Astra Linux – Vulnerability in needrestart

Qualys discovered that before version 3.8, needrestart passed unsanitized data to a library Modules::ScanDeps, which expects safe input. This could allow a local attacker to execute arbitrary shell commands. Please refer to the related CVE-2024-10224 in Modules::ScanDeps...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in FedCM in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Firefox, Thunderbird

A race condition could allow a cross-origin container to obtain permissions from the top-level origin. This vulnerability affects Firefox 128, Firefox ESR 115.13, Thunderbird 115.13, and Thunderbird 128...

Astra Linux – Vulnerability in Chromium

Before version 130.0.6723.92, Dawn in Google Chrome allowed a remote attacker to perform out-of-bounds memory access through a crafted HTML page. Chromium security severity: Critical...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Views in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Type Confusion in V8 in Google Chrome prior to 128.0.6613.113 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in GhostScript

Artifex Ghostscript before version 10.03.0 has a heap-based overflow issue when PDFPassword e.g., for runpdf contains a \000 byte in it...

Astra Linux – Vulnerability in ffmpeg

FFmpeg n6.1.1 has an integer overflow vulnerability in the FFmpeg CAF decoder...

Astra Linux - уязвимость в p7zip

7-Zip is a file archiver with a high compression ratio. 7-Zip supports extracting from Compound Documents. Prior to version 25.0.0, a null pointer dereference in the Compound handler may lead to denial of service. Version 25.0.0 contains a fix cor the issue...

Astra Linux – Vulnerability in ntfs-3g

NTFS-3G before version 75dcdc2 has a use-after-free issue in the ntfsuppercasembs function in libntfs-3g/unistr.c. NOTE: Discussions suggest that exploiting this vulnerability would be challenging...

Astra Linux – Vulnerability in bluez

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability, as the target must connect...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: jfs: Fixed an array-index-out-of-bounds issue in diFree...

Astra Linux – Vulnerability in LibreOffice

LibreOffice Calc compiles cell formulas when opening a spreadsheet. A heap buffer overflow occurred when compiling a very long formula consisting of many opening tokens. The array that tracks nesting depth was allocated with one element too small in the worst-case scenario; as a result, such a...

Astra Linux – Vulnerability in Chromium

The use of “after free” in CSS in Google Chrome before version 127.0.6533.72 allowed a remote attacker who convinced a user to perform certain UI gestures to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in ffmpeg

A vulnerability, classified as critical, was discovered in FFmpeg up to version 5.1.5. This vulnerability affects the fillaudiodata function in the file /libswresample/swresample.c. The vulnerability leads to a heap-based buffer overflow. The attack can be initiated remotely. This issue was fixed...

Astra Linux – Vulnerability in p7zip

The NtfsHandler.cpp NTFS handler in 7-Zip before version 24.01 for 7zz contains a heap-based buffer overflow vulnerability. This vulnerability allows an attacker to overwrite two bytes at multiple offsets beyond the allocated buffer size: buffer+512i-2, where i ranges from 9, 10, 11, etc...