9529 matches found
Astra Linux – Vulnerability in Zabbix
The Zabbix server is vulnerable to a Denial-of-Service DoS vulnerability due to uncontrolled resource exhaustion. An attacker can send specially crafted requests to the server, causing the server to allocate an excessive amount of memory and perform CPU-intensive decompression operations. This...
Astra Linux – Vulnerability in PHP 8.2
In PHP versions 8.1. before 8.1.33, 8.2. before 8.2.29, 8.3. before 8.3.23, and 8.4. pgsql and pdopgsql versions, the escaping functions do not check whether the underlying quoting functions return errors. This could lead to crashes if the Postgres server rejects the string as invalid...
Astra Linux – Vulnerability in gnutls28
A NULL pointer dereference flaw was discovered in the GnuTLS software in the gnutlsfigurecommonciphersuite function...
Astra Linux – Vulnerability in Chromium
Using “after free” in Dawn in Google Chrome before version 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation of Passkeys in Google Chrome prior to 140.0.7339.80 allowed a local attacker to obtain potentially sensitive information through debug logs. Chromium security severity: Low...
Astra Linux – Vulnerability in Node.js
A security flaw in Node.js allows for bypassing network import restrictions. By embedding non-network-related imports within data URLs, attackers can execute arbitrary code, compromising system security. This vulnerability has been confirmed on various platforms. It can be mitigated by prohibitin...
Astra Linux – Vulnerability in Intel Microcode
The sequence of processor instructions may lead to unexpected behavior in some IntelR XeonR 6 Scalable processors. It is possible for a authenticated user to potentially enable privilege escalation through local access...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: ksmbd: It prevents repeated connections from clients with the same IP address. Repeated connections from clients with the same IP address may exhaust the maximum number of connections allowed, thereby preventing other normal clie...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: Wifi: ath11k: The “clear initialized flag” for the deinitialized srng lists was cleared. In several cases, we observe kernel panics upon resuming operations due to ath11k kernel page faults. These incidents occur under the...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: fix refcount leak on table dump There is a reference count leak in ctnetlinkdumptable: c if res ctgeneral; // HERE cb-args1 = unsigned longct; ... While it’s very unlikely, it’s possible that ct could be equ...
Astra Linux – Vulnerability in Firefox
Mitigation bypass in Web Compatibility: Tooling component. This vulnerability has been fixed in Firefox 143 and Thunderbird 143...
Astra Linux – Vulnerability in Chromium
Using “after free” in WebRTC in Google Chrome before version 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: cpufreq/amd-pstate: A missing NULL pointer check was added in amdpstateupdate. Check whether the policy variable is NULL before dereferencing it in amdpstateupdate...
Astra Linux – Vulnerability in Chromium
The use of after-free in Cast in Google Chrome before version 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Thunderbird
Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...
Astra Linux – Vulnerability in Thunderbird
Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...
Astra Linux - уязвимость в curl
Due to a mistake in libcurl's WebSocket code, a malicious server can send a particularly crafted packet which makes libcurl get trapped in an endless busy-loop. There is no other way for the application to escape or exit this loop other than killing the thread/process. This might be used to DoS...
Astra Linux - уязвимость в wireshark
Crash in the EAP dissector in Wireshark 4.0.0 to 4.0.2 allows denial of service via packet injection or crafted capture file...