Astra Linux Composite Manager DoS

The vulnerability of the Compton manager in the Astra Linux operating system is related to errors in multi-monitor configurations. Exploiting this vulnerability can allow an attacker to cause service failures...

fly-admin-ald-se Component Access Control DoS

The vulnerability of the fly-admin-ald-se component in the FLY operating system environment of Astra Linux is related to incorrect configuration of security contexts when adding/removing users who are part of the administrator group. Exploiting this vulnerability allows a malicious actor to cause...

fly-admin-ftp FLY DoS

The vulnerability of the ftp fly-admin-ftp component in the FLY operating environment of the Astra Linux system is related to the absence of changes in the access parameters for the root user directory. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

fly-admin-kiosk Authorization DoS

The vulnerability of the fly-admin-kiosk in the FLY operating environment on the Astra Linux system is related to the improper operation of certain utilities when using the sudo mechanism. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

fly-admin-local-se Component Data Compromise

The vulnerability of the fly-admin-local-se component in the FLY operating system of Astra Linux is related to logging errors when changing user privileges, as well as errors in creating rules for devices with the same name. Exploiting this vulnerability can allow attackers to compromise data...

fly-admin-samba DoS

The vulnerability of the fly-admin-samba component in the FLY operating environment of the Astra Linux system is related to an error that causes an emergency restart of the mnbd service when the name of the user group is changed. Exploiting this vulnerability allows a remote attacker to cause a...

fly-admin-security-monitor Component Data Compromise

The vulnerability of the fly-admin-security-monitor component in the FLY operating environment of the Astra Linux system is related to the absence of blocking mechanisms for system commands, as well as the absence of a configuration status for the closed-programming-environment security system...

Fly-start-panel Component Unauthorized Access

The vulnerability of the fly-start-panel component in the FLY operating system environment of the Astra Linux system is related to the ability to switch to a higher level in the file system through the “Start Menu” and file manager programs. Exploiting this vulnerability can allow an intruder to...

dpkg Privilege Escalation

The vulnerability of the dpkg utility in the Astra Linux operating system is related to the lack of a check for the privilege PARSECCAPINHERITINTEGRITY. This privilege ensures that the integrity of the current process is maintained during package installation. Exploiting this vulnerability allows...

fly-admin-date Component Vulnerability DoS

The vulnerability of the fly-admin-date component in the FLY environment of the Astra Linux operating system is related to a calendar synchronization error due to ntp. Exploiting this vulnerability allows a remote attacker to cause service failures...

fly-admin-freeipa-server Disclosure Confidential Data Compromise

The vulnerability of the fly-admin-freeipa-server graphical tool for running the FreeIPA service on the Astra Linux operating system is related to an error in the handling of options when creating and deleting domains, as well as errors in the handling of restart information. Exploiting this...

fly-admin-gmc-se Component Access Control DoS

The vulnerability of the fly-admin-gmc-se component in the FLY operating system environment of Astra Linux is related to an error that causes a significant delay in opening a folder with the ELF filter enabled. Exploiting this vulnerability allows a remote attacker to cause a service failure...

fly-admin-local Component Data Compromise

The vulnerability of the fly-admin-local component in the FLY operating system environment of Astra Linux is related to the malfunction of the utility when the network is disconnected. Additionally, there is an incorrect interpretation of parameters in the configuration files for pam-tally and...

fly-admin-service-se Component Data Compromise

The vulnerability of the fly-admin-service-se component in the FLY operating system’s working environment is related to an interpretation error in the DocumentRoot settings of the configuration files for Apache. Additionally, there is a lack of checks for installed mail packages. Exploiting this...

fly-qdm Component Maintenance Failure

The vulnerability of the fly-qdm component in the FLY operating environment of the Astra Linux system is related to buffer overflows during the copying of lines of commands from the virtual keyboard. Exploiting this vulnerability can allow an attacker to cause a service failure...

DVD+RW Tools DoS

The vulnerability of the dvd+rw-tools utility in the Astra Linux operating system is related to incorrect termination of writing operations. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

fly-admin-ald-server Access Management Confidential Data Compromise

The vulnerability of the fly-admin-ald-server component in the FLY operating system environment of Astra Linux is related to configuration errors that lead to the addition of already deleted users to a newly created user group. Exploiting this vulnerability allows an attacker who operates remotel...

Fly-admin-dm Graphic Input Component Resource Management Error DoS

The vulnerability of the fly-admin-dm graphic input component in the FLY operating environment of the Astra Linux system is related to inactive restart options. Exploiting this vulnerability allows a remote attacker to cause service failure...

task scheduler fly-admin-cron in Data Compromise

The vulnerability of the task scheduler fly-admin-cron in the FLY environment of the Astra Linux operating system is related to an incorrect definition of the user performing the task editing operations. Exploiting this vulnerability allows a remote attacker to gain access to confidential data,...

fly-admin-digsig Improper Access Control DoS

The vulnerability of the fly-admin-digsig component in the FLY operating system environment of Astra Linux is related to errors that cause significant time delays when opening a folder with the ELF filter enabled. Exploiting this vulnerability allows an attacker to trigger a service failure...