Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ftcm: Fix NULL pointer dereferences in nexus handling The tpg-tpgnexus pointer in the USB Target driver is dynamically managed and tied to userspace configuration via ConfigFS. It can be NULL if the USB host sends...

Astra Linux – vulnerability in Composer

Composer is a dependency manager for PHP. Versions 1.0 through 2.2.26 and 2.3 through 2.9.5 contain a command injection vulnerability in the Perforce::generateP4Command method. This method constructs shell commands by interpolating user-supplied Perforce connection parameters—such as port, user,...

Astra Linux – vulnerability in openssh

In OpenSSH versions prior to 10.3, command execution can occur via shell metacharacters in a username within a command line. This requires that the username on the command line is untrusted, as well as non-default configurations of % in sshconfig...

Astra Linux – vulnerability in Samba

A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the “print command” setting via the “%J” substitution character without escaping shell metacharacters. A remote attacker could exploit this vulnerability by...

Astra Linux – vulnerability in hplip

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This vulnerability may allow privilege escalation and/or arbitrary code execution via operating system command injection...

Astra Linux – vulnerability in Composer

Composer is a dependency manager for PHP. Versions 1.0 through 2.2.26 and 2.3 through 2.9.5 contain a command injection vulnerability in the Perforce::syncCodeBase method, which appends the $sourceReference parameter to a shell command without proper escaping. Additionally, the...

Astra Linux – vulnerability in dovecot

The ManageSieve AUTHENTICATE command crashes when using a literal value as the initial SASL response. This can be exploited to repeatedly crash the ManageSieve service, rendering it unavailable to other users. Access control to the ManageSieve port should be tightened; if the service is not...

Astra Linux – vulnerability in dovecot

Sending a “NOOP ...” command with 4000 opening and closing parentheses results in approximately 1 MB of additional memory usage. Longer commands will cause the client to disconnect. This 1 MB can be retained for extended periods by not ending the command with an LF character. Thus, an attacker...

Astra Linux – vulnerability in openssh

In OpenSSH versions prior to 10.4, the internal-sftp functionality within sshd recognizes only the first 9 command-line arguments. This can be useful if a subsequent command-line argument were used to help maintain the intended security properties of an SFTP connection...

Astra Linux – vulnerability in vim

Vim is an open source, command line text editor. Prior to version 9.2.0073, there was an OS command injection vulnerability in the netrw standard plugin included with Vim. By prompting a user to open a specially crafted URL—for example, using the scp:// protocol handler—an attacker can execute...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix use-after-free in pm8001queuecommand The commit e29c47fe8946 “scsi: pm8001: Simplify pm8001taskexec” includes modifications to pm8001queuecommand. However, it introduces a potential cause of a double-free...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix handling of lrbp-cmd ufshcdqueuecommand may be called twice in a row for a SCSI command before it is completed. Hence, make the following changes: - In the functions that submit a command, do not check the ol...

Astra Linux – vulnerability in sshfs-fuse

SSHFS is a network filesystem client designed to connect to SSH servers. Versions 1.4 through 3.7.6 of SSHFS accept a bracketed mount source such as -oProxyCommand=CMD:/path; findbasepath then removes the brackets, resulting in a host value beginning with - which is passed directly to ssh as a...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fmassstorage: Fix potential integer overflow in checkcommandsizeinblocks The checkcommandsizeinblocks function calculates the data size in bytes by left shifting common-datasizefromcmnd by the block size...

Astra Linux – vulnerability in linux-6.12

In the Linux kernel, the following vulnerability has been resolved: net: ipa: fix GENERICCMD register field masks for IPA v5.0+ The field masks should be adjusted to match the hardware layout documented in the downstream GSI GSIV30EEnGSIEEGENERICCMD. Notably, this fixes a WARN message I was seein...

Astra Linux – vulnerability in vim

Vim is an open source, command line text editor. Prior to version 9.2.0435, there was an OS command injection vulnerability in Vim’s :find command-line completion. When the path option contained backtick-enclosed shell commands, those commands were executed during filename completion. Since the...

Astra Linux – vulnerability in vim

Vim is an open source, command line text editor. Prior to version 9.2.0316, a command injection vulnerability in Vim’s NetBeans interface allowed a malicious NetBeans server to execute arbitrary Ex commands when Vim connected to it, due to unsanitized strings in the defineAnnoType and specialKeys...

Astra Linux – vulnerability in vim

Vim is an open source, command line text editor. Prior to version 9.2.0276, a modeline sandbox bypass in Vim allowed arbitrary OS command execution when a user opened a specially crafted file. The complete, guitabtooltip, and printheader options lack the PMLE flag, enabling modeline execution...

CVE-2026-76740

A security vulnerability exists in HPE Compute Scale-up Server 3200 and 3250 platforms , as well as Superdome Flex and Superdome Flex 280 servers , allowing for Remote Command Execution on the RMC. The root cause is identified as CWE-78 (OS Command Injection) . Attackers with high privileges can ...

CVE-2026-76740 HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280 servers, Remote Command Execution vulnerability

A security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280 servers could be exploited remotely to execute arbitrary commands on the RMC...