Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: net: lltemac: Ensure that the skb is freed when it is completely used. By using the TX BD to track the skb pointer, we can efficiently free the skb buffer after a frame has been transmitted. However, to avoid freeing the skb whil...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Drop the channel lock before queuing buffers. Ensure that read and write locks for the channel are not acquired consecutively by dropping the read lock from parsexferevent. This allows a callback provided to the...

Astra Linux – Vulnerability in pillow

In Pillow before 8.1.0, PcxDecode has a buffer over-reading issue when decoding a crafted PCX file, because the user-supplied stride value is trusted for buffer calculations...

Astra Linux – Vulnerability in Redis

Redis is an open-source, in-memory database that persists data on disk. When using the Redis Lua Debugger, users can send malformed requests, causing the debugger’s protocol parser to read data beyond the actual buffer. This issue affects all versions of Redis with Lua debugging support 3.2 or...

Astra Linux – Vulnerability in glibc

The iconv feature in the GNU C Library also known as glibc or libc6, up to version 2.32, may have a buffer over-read issue when processing invalid multi-byte input sequences in the EUC-KR encoding...

Astra Linux – Vulnerability in Freetype

It was discovered that the FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f contains a heap buffer overflow issue through the sfntinitface function...

Astra Linux – Vulnerability in libxml2

In libxml2 versions before 2.9.14, several buffer handling functions in buf.c xmlBuf and tree.c xmlBuffer do not check for integer overflows. This can lead to out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software that uses libxml2’s...

Astra Linux – Vulnerability in atftp

In tftpdfile.c in atftp up to 0.7.4, there is a buffer overflow issue due to improper handling of buffer-size parameters, which does not correctly account for combinations of data, OACK, and other options...

CVE-2019-17147

CVE-2019-17147: TP-Link TL-WR841N 익스플로잇 개요 이 저장소는 TP-Link TL-WR841N 라우터MIPSEL 아키텍처의 치명적인 원격 코드 실행RCE 취약점인 CVE-2019-17147 에 대한 포괄적인 리버스 엔지니어링 및 익스플로잇을 문서화합니다. 이 취약점은 httpd 웹 서버 데몬에 존재하며, 부적절한 입력 검증으로 인해 사용자 정의 cstrstrncpy 함수를 통한 스택 버퍼 오버플로우 가 발생하고, 인증 없이 임의 코드 실행으로 이어집니다. 취약점| CVE-2019-17147 ---|-...

CVE-2026-42945-nginx-rift-poc

NGINX Rift — CVE-2026-42945 CVE-2026-42945 에 대한 RCE 개념 증명입니다. 이는 2008년에 도입된 NGINX의 ngxhttprewritemodule의 심각한 힙 버퍼 오버플로입니다. rewrite ... ?... + set 캡처 조합을 사용하는 서버에 대해 인증되지 않은 원격 코드 실행을 가능하게 합니다. 원본 취약점 공개: depthfirst — 자동 소스 감사 시스템을 통해 CVE-2026-42946, CVE-2026-40701, CVE-2026-42934와 함께 발견되었습니다...

kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000

A flaw was found in the Linux kernel's afalg cryptography module. This vulnerability involves an arithmetic overflow when processing associated data lengths during the transmit buffer size check. A remote attacker could exploit this flaw by providing a specially crafted associated data length,...

USN-8865-1 edk2 vulnerabilities

It was discovered that EDK II incorrectly handled CMS key unwrapping in the embedded OpenSSL library. An attacker could possibly use this issue to cause a heap buffer overflow, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu...

USN-8865-1: EDK II vulnerabilities

It was discovered that EDK II incorrectly handled CMS key unwrapping in the embedded OpenSSL library. An attacker could possibly use this issue to cause a heap buffer overflow, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu...

Security update for rpm

This update for rpm fixes the following issue: Security issues fixed: CVE-2026-44605: heap buffer overflow in NDB database backend due to unchecked 32-bit arithmetic when parsing the slot table bsc1269584. Other updates and bugfixes: Fix libelf handle not being closed, resulting in build errors...

SUSE-SU-2026:4457-1 Security update for rpm

This update for rpm fixes the following issue: Security issues fixed: - CVE-2026-44605: heap buffer overflow in NDB database backend due to unchecked 32-bit arithmetic when parsing the slot table bsc1269584. Other updates and bugfixes: - Fix libelf handle not being closed, resulting in build erro...

CVE-2025-43300

📚 CVE-2025-43300 - 취약점 상세 분석 🎯 요약 CVE-2025-43300은 DNGDigital Negative 파일 처리 과정에서 TIFF 메타데이터와 JPEG 데이터 간의 불일치 로 인해 발생하는 버퍼 오버플로 취약점으로, 원격 코드 실행RCE이 가능합니다. 🔍 1. DNG 파일 구조 계층 구조: DNG File ├── TIFF Container metadados │ ├── Header │ ├── IFD Image File Directory │ │ ├── Tag 277: SamplesPerPixel declar...

CVE-2026-105285

A security vulnerability has been detected in Totolink A3002MU 1.0.0-B20230403.1455. This affects an unknown function of the file /boafrm/formIpQoS of the component QoS Rule Handler. The manipulation of the argument addQos/comment/entryname leads to stack-based buffer overflow. Remote exploitatio...

Important: Red Hat Security Advisory: gd security update

An update for gd is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

libgd: buffer overflow when processing specially crafted GIF file

A flaw was found in libgd. Processing a specially crafted GIF file allows a remote attacker to trigger a buffer overflow, resulting in an application crash and a denial of service. Arbitrary code execution is possible in theory, but considered highly unlikely because standard image decompression...

nginx-rift-detect

nginx-rift-detect CVE-2026-42945 NGINX Rift에 대한 동작 탐지 스크립트 — nginx에 2008년부터 존재한 ngxhttprewritemodule의 힙 버퍼 오버플로우입니다. ⚠️ 면책 조항 이 도구는 오직 허가된 보안 테스트 및 연구 를 위한 것입니다. 소유하고 있거나 명시적 서면 허가 를 받은 시스템에 대해서만 실행하십시오. 무단 사용은 해당 관할권의 컴퓨터 범죄 관련 법률을 위반할 수 있습니다. 저자는 이 도구로 인한 오용이나 손해에 대해 책임을 지지 않습니다. 배경...