8385 matches found
The vulnerability of the fly-wm window manager in the Astra Linux operating system allows a hacker to gain access to confidential data.
The vulnerability of the fly-wm window manager in the Astra Linux operating system is related to errors in the algorithm for calculating permissions when changing the size of the window of the built-in screen locker. This allows confidential data to be displayed in a virtual machine or in an...
The vulnerability of the fly-weather software package for the Astra Linux operating system, related to a validation error in the input data received from web servers, allows attackers to trigger a service failure.
The vulnerability of the fly-weather software package for the Astra Linux operating system is related to a validation error in the input data received from the web server. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...
The vulnerability of the fly-weather software package for the Astra Linux operating system, related to a validation error in the input data received from web servers, allows attackers to perform spoofing attacks.
The vulnerability of the fly-weather software package for the Astra Linux operating system is related to a validation error in the input data received from web servers. Exploiting this vulnerability can allow attackers to perform spoofing attacks...
The vulnerability in the implementation of the ems_usb_disconnect handler in the Astra Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the emsusbdisconnect handler in the Astra Linux operating system’s kernel is related to a memory release error. In the emsusbprobe function, located in the drivers/net/can/usb/emsusb.c file, memory is allocated to the txmsgbuffer field. However, the emsusbdisconnect handler...
The vulnerability of the interrupt handler implementation “dc395xinterrupt” in the Astra Linux operating system allows a hacker to cause a service failure.
The vulnerability in the implementation of the interrupt handler dc395x Interrupt for the Astra Linux operating system’s kernel the loaded module drivers/scsi/dc395x.ko is related to a memory release error. In the function finddcb, called by the dc395x Interrupt handler, a reference is made to th...
The vulnerability in the implementation of the hwarc_probe handler in the operating system kernel of Astra Linux allows a hacker to trigger a service failure.
The vulnerability in the implementation of the hwarcprobe function in the kernel of the Astra Linux operating system’s driver module drivers/uwb/hwa-rc.ko is related to a memory release error. In the hwarcprobe function, memory is allocated to hwarc, but this memory is not released correctly when...
The vulnerability of the virtio_pci_remove handler’s implementation in the Astra Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the virtiopciremove handler in the Astra Linux operating system’s kernel the loaded module drivers/virtio/virtiopci.ko is related to a memory release error. In the virtiopciprobe function, memory is allocated for vpdev, but the memory is not released in the virtiopciremove...
The vulnerability in the implementation of the ddb_open handler in the kernel of the Astra Linux operating system allows a hacker to cause a service failure.
The vulnerability in the implementation of the ddbopen handler in the kernel of the Astra Linux operating system the loaded module is drivers/media/pci/ddbridge/ddbridge.ko is related to a memory leak. In the ddbopen function, a call is made to the ddbsiminorinode array, which contains 32 element...
The vulnerability of the fly-admin-autostart utility for configuring automatic startup of programs in the Astra Linux operating system, related to pointer assignment errors, allows a hacker to trigger a service failure.
The vulnerability of the fly-admin-autostart utility for configuring automatic startup of programs in the Astra Linux operating system is related to the lack of checking for the value of a pointer being set to NULL. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the component for integrating various authentication methods in the Astra Linux operating system arises from the use of unstable cryptographic hash functions for storing Unix passwords. This allows a hacker to gain unauthorized access to the system.
The vulnerability of the component for integrating various authentication methods in the Astra Linux operating system is related to the use of unstable cryptographic hash functions for storing Unix passwords. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the...
The vulnerability of the tool for adjusting mandate attributes of Astra Linux objects allows a hacker to circumvent the specified security policy restrictions.
The vulnerability of the “correction of mandate attributes” utility in the astrase-fix-maildir object of the Astra Linux operating system is related to an error in assigning the ehole tag to the dovecot-uidlist file, which stores the “UID filename” pair. Exploiting this vulnerability can allow a...
The vulnerability of the fly-admin-printer package allows unauthorized changes to the general access settings for printers on the Astra Linux operating system. This vulnerability enables a hacker to modify these settings without authorization.
The vulnerability of the fly-admin-printer package for configuring the printing system and printer options in the Astra Linux operating system is related to incorrect configuration of general access parameters. Exploiting this vulnerability may allow a malicious individual to unauthorizedly modif...
The vulnerability of the libparsec-mac-qt5 library, used for developing graphical applications with Qt 5 graphical interfaces on the Astra Linux operating system, allows a hacker to cause a service failure.
The vulnerability of the libparsec-mac-qt5 library for developing graphical applications using Qt 5 graphical interfaces on the Astra Linux operating system is related to a flaw that causes excessive load when there are a large number of domain users. Exploiting this vulnerability may allow a...
The vulnerability of the graphical security policy management utility fly-admin-smc on the Astra Linux operating system arises from the absence of a user list and verification during the creation of levels and categories. This allows users to violate the established security policies.
The vulnerability of the fly-admin-smc security policy management graphical utility on the Astra Linux operating system is related to the absence of a user list and verification during the creation of levels and categories. Exploiting this vulnerability could allow a hacker to violate the...
The vulnerability of the window manager fly-wm component in the Astra Linux operating system allows a intruder to trigger a service failure.
The vulnerability of the window blocking component of the fly-wm operating system’s Astra Linux device lies in a flaw that causes the window blocking component to fail to execute, especially when the XGrabKeyboard call has already been made by another client. Exploiting this vulnerability could...
The vulnerability of the fly-admin-samba package for managing Samba network resources on the Astra Linux operating system allows a hacker to cause a service failure.
The vulnerability of the fly-admin-samba package for managing Samba network resources on the Astra Linux operating system is related to a conflict in the way the package interacts with the Astra Linux Directory Service ALD. Exploiting this vulnerability could allow a malicious actor to cause...
The vulnerability of the graphical user input component in the fly-qdm system of the Astra Linux operating system allows a hacker to cause a service failure or execute arbitrary code.
The vulnerability of the graphical user input component in the fly-qdm system of the Astra Linux operating system is related to buffer overflows when copying a command string from the virtual keyboard. Exploiting this vulnerability can allow an attacker to cause service failures or execute...
The vulnerability of the opensc authentication package for smart cards and system USB tokens in the Astra Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the opensc authentication package for smart cards and operating system USB tokens in Astra Linux is related to incorrect operation of the Rutek S drivers. Exploiting this vulnerability can allow a hacker to cause service failure...
The vulnerability of the component for integrating various authentication methods in the Astra Linux operating system allows a hacker to circumvent security policies set by the system, due to configuration errors in the password policies for user domain accounts.
The vulnerability of the component for integrating various authentication methods in the Astra Linux operating system is related to configuration errors in password policies, which result in the lack of checks to ensure that the specified restrictions on user domain account passwords are met...
The vulnerability of the linux-astra-modules package of the Astra Linux operating system, which allows a hacker to circumvent established security policy rules
The vulnerability of the linux-astra-modules package in the Astra Linux operating system is related to an access control permission assignment error, which allows for bypassing the closed software environment by writing to /proc/$PID/mem. Exploiting this vulnerability can enable a perpetrator to...