Astra Linux – Vulnerability in Firefox, Thunderbird

Offscreen Canvas did not properly prevent cross-origin tampering, which could allow access to image data from another site in violation of the same-origin policy. This vulnerability affects Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12...

Astra Linux – Vulnerability in Chromium

A heap buffer overflow in the Tab Strip component in Google Chrome prior to version 126.0.6478.54 allowed a remote attacker to perform an out-of-bounds memory read through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: fixed the race condition in dstnegativeadvice The dstnegativeadvice function does not enforce proper RCU rules when sk-dstcache must be cleared, leading to a potential Use-After-Free error UAF. RCU rules state that we must...

The vulnerability of the drm_mode_setcrtc() function in the drivers/gpu/drm/drm_crtc.c file of the DRM driver for the Astra Linux Special Edition operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failure.

The vulnerability of the drmmodesetcrtc function in the drivers/gpu/drm/drmcrtc.c file of the DRM driver for the Astra Linux Special Edition operating system is related to access and manipulation of dynamically allocated uninitialized memory. Exploiting this vulnerability could allow an attacker ...

PT-2023-36413 · Astra Linux · Astra Linux Special Edition

Уязвимость функции drm mode setcrtc в модуле drivers/gpu/drm/drm crtc.c драйвера DRM ядра операционной системы Astra Linux Special Edition связана с доступом и работой с динамической неинициализированной памятью. Эксплуатация уязвимости может позволить нарушителю получить доступ к конфиденциальны...

The vulnerability of the centralized system for managing user identities in FreeIPA, which is used by Astra Linux operating systems, allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the centralized system for managing user identities in FreeIPA for Astra Linux operating systems is related to a configuration error that allows unauthorized access to user password hashes. Exploiting this vulnerability enables an attacker who operates remotely to gain access...

PT-2023-36404

Уязвимость централизованной системы по управлению идентификацией пользователей FreeIPA операционных систем Astra Linux связана с ошибкой конфигурации, приводящей к несанкционированному доступу на чтение к хешам паролей пользователей. Эксплуатация уязвимости позволяет нарушителю, действующему...

The vulnerability of the Wine package on the Astra Linux (Orel) operating system relates to the display of external program windows over the Astra Linux (Orel) lock window, allowing a intruder to gain unauthorized access to confidential information.

The vulnerability of the Wine software on the Astra Linux operating system Orel relates to the display of modal windows of third-party programs such as “MediaLog” over the Astra Linux lock screen. Exploiting this vulnerability could allow a malicious individual to gain unauthorized access to...

PT-2021-3799

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to the display of modal windows from third-party applications such as МИС "Медиалог" over the Astra Linux lock screen. This could potentially allow an attacker to gai...

PT-2021-13364 · Astra Linux · Astra Linux

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The provided descriptions do not contain sufficient information to summarize the key details about the issue. Recommendations: At the moment, there is n...

The vulnerability of the Astra Linux Directory Service Management System (ALD) allows a violator to trigger a service failure by preventing resources from being released after their useful life has expired.

The vulnerability of the Astra Linux Directory Service Management System ALD is related to the improper termination of software programs. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Astra Linux Directory Service’s EPW management system, related to resource exhaustion, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Astra Linux Directory Service Management System ALD is related to the issue of multiple software executions. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the Astra Linux Directory service’s EPW management system, related to the escape of operations beyond the buffer in memory, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Astra Linux Directory Service Management System ALD is related to an error that causes operations to go beyond the memory limit. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the Astra Linux Directory service’s EPPT management system, related to improper access control, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Astra Linux Directory Service Management System ALD is related to an error in setting the integrity of directories. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the Astra Linux Directory service’s EPPT management system, related to improper authorization, allows a perpetrator to access confidential data and also trigger a service failure.

The vulnerability of the Astra Linux Directory Service Management System ALD is related to an authentication error for local users. Exploiting this vulnerability can allow attackers to access confidential data and also cause service failures...

The vulnerability of the Astra Linux Directory service’s EPP management system, which is related to insufficient verification of data authenticity, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Astra Linux Directory Service Management System ALD is related to an error in obtaining the Samba domain name from the server in console mode. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause service failur...

The vulnerability of the Astra Linux Directory Service Management System (ALD) allows a violator to trigger a service failure by preventing resources from being released after their useful life has expired.

The vulnerability of the Astra Linux Directory Service Management System ALD is related to the improper termination of software during operation. Exploiting this vulnerability can allow attackers to cause service failures...

SUSE-SU-2020:0540-1 Security Beta update for Salt

This update fixes the following issues: salt: - Fix 'osfamily' grain for Astra Linux Common Edition - Update to Salt version 2019.2.3 CVE-2019-17361 bsc1163981 See release notes: https://docs.saltstack.com/en/latest/topics/releases/2019.2.3.html - Enable passing grains to start event based on...

SUSE-SU-2020:0538-1 Security Beta update for Salt

This update fixes the following issues: salt: - Fix 'osfamily' grain for Astra Linux Common Edition - Update to Salt version 2019.2.3 CVE-2019-17361 bsc1163981 See release notes: https://docs.saltstack.com/en/latest/topics/releases/2019.2.3.html - Enable passing grains to start event based on...

PT-2020-22843

Уязвимость системы управления ЕПП службы Astra Linux Directory ALD связана с некорректным завершением программного обеспечения, которое зависло в процессе работы. Эксплуатация уязвимости может позволить нарушителю, вызвать отказ в обслуживании...