8221 matches found
Astra Linux – Vulnerability in Chromium
In Google Chrome, policy bypass in CORS before version 126.0.6478.54 allowed a remote attacker to bypass discretionary access control through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
The use of “after free” in Audio in Google Chrome before version 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption through a crafted PDF file. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
The use of after-free in Dawn, prior to version 126.0.6478.114, allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Before version 126.0.6478.54, using free after interactions in the Browser UI in Google Chrome allowed a remote attacker who convinced a user to perform certain UI gestures to read memory data through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
The use of after-free in Dawn, prior to version 126.0.6478.54, allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Type Confusion in V8 in Google Chrome before version 126.0.6478.54 allowed a remote attacker to perform an out-of-bounds memory write through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
In Dawn, out-of-bounds memory access in Google Chrome before version 126.0.6478.114 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
The use of after-free in Dawn, prior to version 126.0.6478.54, allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in mbedtls
A vulnerability was discovered in Mbed TLS 2.x before version 2.28.7, and also in Mbed TLS 3.x before version 3.5.2. There was a timing-related side channel involved in RSA private operations. This side channel could allow a local attacker to recover the plaintext. To exploit this vulnerability,...
Astra Linux – Vulnerability in libarchive
Libarchive Remote Code Execution Vulnerability...
The vulnerability of the drm_mode_setcrtc() function in the drivers/gpu/drm/drm_crtc.c file of the DRM driver for the Astra Linux Special Edition operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failure.
The vulnerability of the drmmodesetcrtc function in the drivers/gpu/drm/drmcrtc.c file of the DRM driver for the Astra Linux Special Edition operating system is related to access and manipulation of dynamically allocated uninitialized memory. Exploiting this vulnerability could allow an attacker ...
PT-2023-36413 · Astra Linux · Astra Linux Special Edition
Уязвимость функции drm mode setcrtc в модуле drivers/gpu/drm/drm crtc.c драйвера DRM ядра операционной системы Astra Linux Special Edition связана с доступом и работой с динамической неинициализированной памятью. Эксплуатация уязвимости может позволить нарушителю получить доступ к конфиденциальны...
The vulnerability of the centralized system for managing user identities in FreeIPA, which is used by Astra Linux operating systems, allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of the centralized system for managing user identities in FreeIPA for Astra Linux operating systems is related to a configuration error that allows unauthorized access to user password hashes. Exploiting this vulnerability enables an attacker who operates remotely to gain access...
The vulnerability of the Wine package on the Astra Linux (Orel) operating system relates to the display of external program windows over the Astra Linux (Orel) lock window, allowing a intruder to gain unauthorized access to confidential information.
The vulnerability of the Wine software on the Astra Linux operating system Orel relates to the display of modal windows of third-party programs such as “MediaLog” over the Astra Linux lock screen. Exploiting this vulnerability could allow a malicious individual to gain unauthorized access to...
PT-2021-13364 · Astra Linux · Astra Linux
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The provided descriptions do not contain sufficient information to summarize the key details about the issue. Recommendations: At the moment, there is n...
The vulnerability of the Astra Linux Directory Service Management System (ALD) allows a violator to trigger a service failure by preventing resources from being released after their useful life has expired.
The vulnerability of the Astra Linux Directory Service Management System ALD is related to the improper termination of software programs. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the Astra Linux Directory Service Management System (ALD) allows a violator to trigger a service failure by preventing resources from being released after their useful life has expired.
The vulnerability of the Astra Linux Directory Service Management System ALD is related to the improper termination of software during operation. Exploiting this vulnerability can allow attackers to cause service failures...
The vulnerability of the Astra Linux Directory service’s EPP management system, which is related to insufficient verification of data authenticity, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the Astra Linux Directory Service Management System ALD is related to an error in obtaining the Samba domain name from the server in console mode. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause service failur...
The vulnerability of the Astra Linux Directory service’s EPW management system, related to the escape of operations beyond the buffer in memory, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the Astra Linux Directory Service Management System ALD is related to an error that causes operations to go beyond the memory limit. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...
The vulnerability of the Astra Linux Directory service’s EPPT management system, related to improper access control, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the Astra Linux Directory Service Management System ALD is related to an error in setting the integrity of directories. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...