Astra Linux – Vulnerability in Chromium

Insufficient data validation in Mojo in Google Chrome prior to 129.0.6668.89 allowed a remote attacker who had compromised the renderer process to perform an out-of-bounds memory write via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Memory access out of bounds in V8 in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Firefox

Memory safety bugs exist in Firefox 129. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This vulnerability affects Firefox versions prior to 130...

Astra Linux – Vulnerability in expat

A issue was discovered in libexpat before version 2.6.3. In xmlparse.c, a negative length value for XMLParseBuffer is allowed without being rejected...

Astra Linux – Vulnerability in unbound

The DNS protocol in RFC 1035 and its updates allows remote attackers to cause a denial of service resource consumption by arranging for DNS queries to be accumulated over seconds. As a result, responses are sent in a pulsing burst, which can be considered traffic amplification in some cases. This...

Astra Linux – Vulnerability in oath-toolkit

pamoath.so in oath-toolkit 2.6.7 through 2.6.11—before 2.6.12—allows root privilege escalation. This is because, in the context of PAM code running as root, it improperly handles user file access, such as by calling fchown when a symlink exists...

Astra Linux – Vulnerability in tidy-html5

A vulnerability in HTACG HTML Tidy v5.7.28 allows attackers to execute arbitrary code through the -g option of the CleanNode function in gdoc.c...

Astra Linux – Vulnerability in needrestart

Qualys discovered that needrestart, prior to version 3.8, allowed local attackers to execute arbitrary code as root by exploiting a race condition. This allowed the attackers to trick needrestart into running their own fake Python interpreter instead of the system’s actual Python interpreter. The...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: drm/amdgpu/mes: fixed the use-after-free issue. Deleted the fence fallback timer to fix the ramdom use-after-free issue. v2: moved to amdgpumes.c...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: BPF: Avoid using an uninitialized value in BPFCOREREADBITFIELD Changes from V1: - A default branch is added to the switch statement to initialize val. GCC warns that val may be used uninitialized in the BPFCREREADBITFIELD macro,...

Astra Linux – Vulnerability in Firefox

If a website is allowed to display pop-up windows, it can cause Select elements to appear above other websites, thereby performing a spoofing attack. This vulnerability affects Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2...

Astra Linux – Vulnerability in Chromium

Type Confusion in V8 in Google Chrome before version 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

The use of “after free” in PDFium in Google Chrome before version 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption through a crafted PDF file. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

A heap buffer overflow in the Tab Strip component in Google Chrome prior to version 126.0.6478.54 allowed a remote attacker to perform an out-of-bounds memory read through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in libarchive

“executefilteraudio” in “archivereadsupportformatrar.c” in “libarchive” before version 3.7.5 allows out-of-bounds access via a crafted archive file, as “src” can move beyond “dst”...

Astra Linux – Vulnerability in libarchive

The executefilterdelta function in archivereadsupportformatrar.c in libarchive before version 3.7.5 allows for out-of-bounds access through a crafted archive file, as src may move beyond dst...

Astra Linux – Vulnerability in Botan

Botan is a C++ cryptography library. X.509 certificates can identify elliptic curves using either an object identifier or by explicitly encoding the parameters. Before versions 3.3.0 and 2.19.4, an attacker could present an ECDSA X.509 certificate using explicit encoding, where the parameters wer...

Astra Linux – Vulnerability in GhostScript

A issue was discovered in Artifex Ghostscript prior to version 10.03.1. In the file psi/zmisc1.c, when SAFER mode is used, it allows the use of eexec seeds that deviate from the Type 1 standard...

Astra Linux – Vulnerability in Parsec

The vulnerability of the pdp-id utility in the PARSEC security subsystem is related to improper memory release after its use. Exploiting this vulnerability allows an attacker to cause a service failure...

Astra Linux – Vulnerability in Firefox

The frame iterator could get stuck in a loop when encountering certain Wasm frames, leading to incorrect stack traces. This vulnerability affects Firefox 128 and Thunderbird 128...