Astra Linux – Vulnerability in APR

The lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users to read access to named shared memory segments, potentially exposing sensitive application data. This issue does not affect non-Unix platforms, or builds with APRUSESHMEMSHMGET=1 apr.h. Users...

Astra Linux – Vulnerability in golang-github-containers-buildah, libpod

A vulnerability was discovered in Buildah. The cache mounting process does not properly validate whether the user-specified paths for the cache are within our cache directory. This allows a RUN instruction in a Container file to mount an arbitrary directory from the host read/write into the...

Astra Linux – Vulnerability in symfony

The Symphony process is a module for the Symphony PHP framework that executes commands in sub-processes. When using a persisted remember-me cookie, Symphony does not check whether the username stored in the database matches the username contained in the cookie, resulting in an authentication...

Astra Linux - уязвимость в imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-1, when preparing to transform from Log to sRGB colorspaces, the logmap construction fails to handle cases where the reference-black or reference-white value is larger than 1024...

Astra Linux – Vulnerability in OpenSSH

A flaw was discovered in the OpenSSH package. For each ping packet received by the SSH server, a pong packet is allocated in a memory buffer and stored in a queue of packets. This memory buffer is only freed after the server/client key exchange is completed. A malicious client may continue to sen...

Astra Linux – Vulnerability in Qemu

A heap buffer overflow was detected in the virtio-snd device in QEMU. When reading input audio through the virtio-snd input callback, the virtiosndpcmincb function did not check whether the allocated I/O block could accommodate the data buffer. This issue can lead to an out-of-bounds write if the...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: bnx2x: Fix multiple UBSAN array-index-out-of-bounds Fix UBSAN warnings that occur when using a system with 32 physical cpu cores or more, or when the user defines a number of Ethernet queues greater than or equal to FPSBMAXE1x...

Astra Linux – Vulnerability in golang-github-containers-buildah, libpod

There is a vulnerability in the bind-propagation option of the Dockerfile RUN --mount instruction. The system does not properly validate the input passed to this option, allowing users to pass arbitrary parameters to the mount instruction. This issue can be exploited to mount sensitive directorie...

Astra Linux – Vulnerability in symfony

symfony/runtime is a module for the Symphony PHP framework that enables decoupling PHP applications from global state. When the registerargvargc PHP directive is set to on, and users call any URL with a specially crafted query string, they can change the environment or debug mode used by the kern...

Astra Linux – Vulnerability in bind9

Clients that use DNS-over-HTTPS DoH can exhaust the CPU and/or memory of a DNS resolver by flooding it with crafted valid or invalid HTTP/2 traffic. This issue affects BIND 9 versions 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, and 9.18.11-S1 through 9.18.32-S1...

Astra Linux – Vulnerability in HAPProxy

There is an issue of inconsistent interpretation of HTTP requests in HAProxy, known as “HTTP Request/Response Smuggling”. If this vulnerability is exploited, a remote attacker may gain access to paths that are restricted by an Access Control List ACL set on the product. As a result, the attacker...

Astra Linux – Vulnerability in Python-Werkzeug

Werkzeug is a web server gateway interface web application library. Applications that use werkzeug.formparser.MultiPartParser—corresponding to versions of Werkzeug prior to 3.0.6—to parse multipart/form-data requests e.g., all Flask applications are vulnerable to a relatively simple but effective...

Astra Linux – Vulnerability in curl

When curl is instructed to use HSTS, the expiration time of a subdomain may overwrite the cache entry of the parent domain, causing it to expire sooner or later than intended. This issue affects curl when using applications that enable HSTS and utilize URLs with the insecure HTTP:// scheme. It al...

Astra Linux – Vulnerability in Waitress

Waitress is a Web Server Gateway Interface server for Python 2 and 3. A remote client can send a request that is exactly recvbytes long default: 8192, followed by a secondary request using HTTP pipeling. When request lookahead is disabled default, we do not read any further requests. If the first...

Astra Linux – Vulnerability in llvm-toolchain-15

It was discovered that the commit fdbc55a5 from the llvm-project contains a segmentation fault due to the component mlir::IROperandmlir::OpOperand...

Astra Linux – Vulnerability in llvm-toolchain-15

It was discovered that the commit a0138390 from the llvm-project contains a segmentation fault due to the component mlir::spirv::TargetEnv::TargetEnvmlir::spirv::TargetEnvAttr...

Astra Linux – Vulnerability in gnutls28

A flaw was discovered in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits deterministic behaviors in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such as when using the GNUTLSPRIVKEYFLAGREPRODUCIBLE flag, it can result in a noticeable reducti...

Astra Linux – Vulnerability in gnutls28

A flaw has been discovered in GnuTLS, where an application crash can occur when attempting to verify a specially crafted .pem bundle using the “certtool --verify-chain” command...

Astra Linux – Vulnerability in OpenSSL

Issue summary: Applications that perform certificate name checks e.g., TLS clients checking server certificates may attempt to read an invalid memory address, resulting in an abnormal termination of the application process. Impact summary: An abnormal termination of an application can cause a...

Astra Linux - уязвимость в imagemagick

A stack-based buffer overflow issue was found in ImageMagick's coders/tiff.c. This flaw allows an attacker to trick the user into opening a specially crafted malicious tiff file, causing an application to crash, resulting in a denial of service...