10069 matches found
Astra Linux – Vulnerability in Chromium
Insufficient validation of untrusted input in the Network section of Google Chrome before version 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
Type Confusion in V8 in Google Chrome prior to 148.0.7778.216 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. Chromium security severity: Medium...
Astra Linux – Vulnerability in Apache2
A out-of-bounds read vulnerability exists in the modmacro module of the Apache HTTP Server. This issue affects the Apache HTTP Server version up to 2.4.57...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in the keyboard interface in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: clk: visconti: Ensure that clkinitdata is fully initialized. The clkinitdata structure contains several mutually exclusive members, which are used by different methods to specify the possible parents of a clock. This allows drive...
Astra Linux – Vulnerability in hwloc
A issue was discovered in open-mpi hwloc 2.1.0: attackers can cause a denial of service or other unspecified impacts through glibc-cpuset in topology-linux.c...
Astra Linux – Vulnerability in Zabbix
Zabbix allows for the configuration of SMS notifications. AT command injection occurs on the “Zabbix Server” because there is no validation of the “Number” field either on the web interface or on the Zabbix server side. An attacker can send specially crafted phone numbers via SMS and execute...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Added a NULL pointer check for kzalloc Why & How Check the return pointer of kzalloc before using it...
Astra Linux – Vulnerability in Chromium
Before version 88.0.4324.96, using Blink with a "after free" mechanism allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...
Astra Linux – Vulnerability in exim4
Exim 4 before 4.94.2 has an improper restriction on write operations within the bounds of a memory buffer. This occurs when processing name=value pairs within MAIL FROM and RCPT TO commands...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: - misc: ibmasm: A flaw in ibmasmhandlemouseinterrupt caused an out-of-bounds MMIO read. ibmasmhandlemouseinterrupt performed an out-of-bounds MMIO read when the queue reader or writer index from hardware exceeded REMOTEQUEUESI...
Astra Linux – Vulnerability in Chromium
Inappropriate implementations of WebAuthentication in Google Chrome prior to version 96.0.4664.45 allowed a remote attacker to leak cross-origin data through a crafted HTML page...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: drm/nouveau/kms/nv50-: fixed the file release memory leak. When using singleopen for opening, singlerelease should be called; otherwise, the ‘op’ allocated in singleopen will be leaked...
Astra Linux – Vulnerability in Apache2
When an HTTP/2 stream is reset by a client via an RST frame, there is a time window during which the memory resources associated with the request are not immediately reclaimed. Instead, the deallocation of these resources is delayed until after the connection is closed. This allows clients to...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in geolocation in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: xdp: Fixed zero-copy frame layout. The xdpconvertzctoxdpframe function clones an XSK packet into an order-0 page and uses PAGESIZE as the frame size. This allows the cloned frame to occupy the page tail required by...
Astra Linux – Vulnerability in binutils
The bfdgenericreadminisymbols function in syms.c within the Binary File Descriptor BFD library also known as libbfd, as part of GNU Binutils 2.31, contains a memory leak that can occur due to an improperly crafted ELF file. This leads to a denial of service condition due to excessive memory...
Astra Linux – Vulnerability in p7zip
7-ZIP ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected 7-ZIP installations. Interaction with this product is required to exploit this vulnerability, but the attack vectors may vary depending ...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: netfilter: conntrack – removed the use of sprintf. Replace it with scnprintf; the buffer sizes should be large enough to hold the result, eliminating the need for snprintf and overflow checks. Increase the buffer size in...