Astra Linux – Vulnerability in WebKit2GTK

A memory management issue related to “use after free” operations has been addressed through improved memory management mechanisms. This issue is fixed in iOS 14.8 and iPadOS 14.8, as well as macOS Big Sur 11.6. Processing maliciously crafted web content may lead to arbitrary code execution. Apple...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: PCI: Endpoint: pci-epf-vntb: Stop cmdhandler work in epfntbepccleanup Disable the delayed work before clearing BAR mappings and doorbells to avoid running the handler after resources have been torn down. Unable to handle kerne...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: mptcp: pm: in-kernel: always sets ID as available when rm endp is called. Syzkaller managed to identify a combination of actions that caused this warning to occur: WARNING: net/mptcp/pmkernel.c:1074 at marksubflowendpavailable...

Astra Linux – Vulnerability in Chromium

Before version 93.0.4577.82, using “after free” in Permissions in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Inappropriate implementations of navigation functions in Google Chrome on iOS before version 90.0.4430.72 allowed a remote attacker to leak cross-origin data through a crafted HTML page...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: smb: client: avoid double-free in smbdfreesendio after smbdsendbatchflush smbdsendbatchFlush already calls smbdfreesendio; therefore, we should not call it again after smbdpostsend. It has been moved to the batch list...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: crypto: caam – fix DMA corruption on long hmac keys When a key longer than the block size is provided, it is copied and then hashed into the actual key. The memory allocated for the copy needs to be rounded to the DMA cache...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: comedi: vmk80xx: fixed incomplete endpoint checking While vmk80xx does have endpoint checking implemented, some issues may still go unnoticed. Depending on the hardware model, URBs can have either bulk or interrupt types, and the...

Astra Linux – Vulnerability in libgd2

In the GD Graphics Library also known as LibGD, from version 2.2.5 onwards, there is a heap-based buffer over-read issue in tiffWriter within the gdtiff.c file. NOTE: The vendor states that “In my opinion, this issue should not have a CVE, since the GD and GD2 formats are documented as ‘obsolete’...

Astra Linux – Vulnerability in Tomcat9

There is a vulnerability in Apache Tomcat related to unchecked error conditions. If Tomcat is configured to use a custom Jakarta Authentication ServerAuthContext component, it may throw an exception during the authentication process without explicitly setting an HTTP status indicating failure. As...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: btrfs: Fixed a deadlock that occurs during concurrent direct IO writes when there is limited free data space. When reserving data space for direct IO writes, a deadlock can occur if multiple tasks attempt to write to the same fil...

Astra Linux – Vulnerability in Wireshark

A large loop in the PNRP dissector in Wireshark versions 3.4.0 to 3.4.9, and 3.2.0 to 3.2.17 allows for denial of service through packet injection or malicious capture files...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: ftrace: Fixed recursive locking of directmutex in ftracemodifydirectcaller Naveen reported recursive locking of directmutex with the sample ftrace-direct-modify.ko file: 74.762406 WARNING: Possible recursive locking detected...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: In the context of tlsswrecvmsg, we take a reference to psock after locking it with rxlock, in order to avoid a leak. However, if this operation fails, we return directly without releasing the reference. Instead of creating a new...

Astra Linux – Vulnerability in Chromium

A heap buffer overflow in the Task Manager of Google Chrome prior to version 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption through specific user interactions...

Astra Linux – Vulnerability in glib2.0

A flaw was discovered in GLib. The deserialization of GVariant is vulnerable to an exponential blowup issue, where a malicious GVariant can cause excessive processing, resulting in a denial of service...

Astra Linux – Vulnerability in Zabbix

During Zabbix installation from RPM, the DACOVERRIDE SELinux capability is used to access PID files in the /var/run/zabbix folder. In this case, processes of Zabbix Proxy or Server can bypass the file read, write, and execute permission checks at the file system level...

Astra Linux – Vulnerability in freerdp2

FreeRDP is a free implementation of the Remote Desktop Protocol. Clients that use FreeRDP before version 3.5.1 are vulnerable to out-of-bounds read vulnerabilities. Version 3.5.1 includes a patch for this issue. There are no known workarounds available...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: Tracing: Ensure visibility when inserting an element into tracingmap. Running the following two commands in parallel on a multi-processor AArch64 machine may occasionally generate an unexpected warning regarding duplicate...

Astra Linux – Vulnerability in Linux 5.15

A use-after-free flaw was discovered in lan78xxdisconnect in drivers/net/usb/lan78xx.c within the network sub-component, net/usb/lan78xx, in the Linux kernel. This flaw allows a local attacker to cause the system to crash when the LAN78XX USB device is disconnected...