9534 matches found
Astra Linux – Vulnerability in iniparser
Iniparser v4.1 is vulnerable to NULL Pointer Dereference in the iniparsergetlongint function, as there is no check for NULL values in the return value of the iniparsergetstring function...
Astra Linux – Vulnerability in Chromium
Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Keepalived
The vulnerability of the Keepalived network traffic balancing system is related to unvalidated array indexing. Exploiting this vulnerability could allow attackers to cause service failures...
Astra Linux – Vulnerability in bzip2
The vulnerability of the Bzip2 data compression utility is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
Astra Linux – Vulnerability in libssh2
The vulnerability in the src/kex.c component of the SSH2 protocol implementation library Libssh2 involves reading data beyond the allowed buffer limits. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data remotely...
Astra Linux – Vulnerability in MariaDB
MariaDB Server versions 10.4 through 10.5., 10.6 through 10.6., 10.7 through 10.11., 11.0 through 11.0., and 11.1 through 11.4. crash when using Itemdirectviewref::derivedfieldtransformerforwhere...
Astra Linux – Vulnerability in Intel Microcode
Missing reference to active allocated resources for some IntelR XeonR processors may allow an authenticated user to potentially exploit a denial-of-service attack through local access...
Astra Linux – Vulnerability in Chromium
Side-channel information leakage in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to leak cross-origin data through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in Permissions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: vfio/pds: Fixed the missing detachioas operation. When CONFIGIOMMUFD is enabled and a device is bound to the pdsvfiopci driver, the following WARNON trace is observed, and the probe fails: WARNING: CPU: 0 PID: 5040 at...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: arm64/entry: DAIF was unmasked in cpuswitchto, and called on the irqstack. cpuswitchto and callonirqstack manipulate the SP to switch to different stacks, along with the Shadow Call Stack if it is enabled. These two stack...
Astra Linux – Vulnerability in edk2
EDK2 contains a vulnerability in the BIOS, where an attacker can cause a “Protection Mechanism Failure” through local access. Successful exploitation of this vulnerability will lead to the execution of arbitrary code, compromising Confidentiality, Integrity, and Availability...
Astra Linux – Vulnerability in Intel Microcode
Improper handling of overlap between protected memory ranges in some IntelR XeonR 6 processors with IntelR TDX may allow a privileged user to potentially enable an escalation of privileges through local access...
Astra Linux – Vulnerability in libemail-mime-perl
A problem of excessive memory usage CWE-770 exists in Email-MIME, prior to version 1.954. This issue can lead to a denial of service when parsing multipart MIME messages. The patch updates introduced in 2020 and 2024 limit the maximum depth of processing and the total number of parts in MIME...
Astra Linux – Vulnerability in Firefox
Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 142 and Firefox ESR 140.2...
Astra Linux – Vulnerability in freeipa
A privilege escalation flaw from the host to the domain administrator was discovered in FreeIPA. This vulnerability is similar to CVE-2025-4404, as it fails to validate the uniqueness of the krbCanonicalName. While the previously released version added validations for the admin@REALM credential,...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: hfs: fixed a general protection fault in hfsfindinit The hfsfindinit method can cause a crash if the tree pointer is NULL: 45.746290T9787 Oops: general protection fault, likely due to a non-canonical address 0xdffffc0000000008...
Astra Linux – Vulnerability in Intel Microcode
An improperly implemented security check for standard in the DDRIO configuration for some IntelR XeonR 6 processors, when using IntelR SGX or IntelR TDX, may allow a privileged user to potentially enable privilege escalation through local access...
Astra Linux – Vulnerability in libnbd
A flaw was discovered in libnbd. A server may respond with a block size larger than 2^63 the NBD specification states that the size is a 64-bit unsigned value. This issue could cause an application to crash or lead to other unintended behaviors for NBD clients that do not properly handle the retu...