Astra Linux – Vulnerability in atftp

In tftpdfile.c in atftp up to 0.7.4, there is a buffer overflow issue due to improper handling of buffer-size parameters, which does not correctly account for combinations of data, OACK, and other options...

Astra Linux – Vulnerability in unbound

Unbound from NLnet Labs, including versions up to and including 1.12.0, and NSD from NLnet Labs, including versions up to and including 4.3.3, contain a local vulnerability that allows for a local symlink attack. When creating the PID file, Unbound and NSD either create the file if it does not...

Astra Linux – Vulnerability in cifs-utils

It was discovered that cifs-utils’ mount.cifs function invoked a shell when requesting the Samba password, which could be exploited to inject arbitrary commands. An attacker who had special permissions, such as those through sudo rules, could use this vulnerability to escalate their privileges...

Astra Linux – vulnerability in cpio

GNU cpio version 2.13 allows attackers to execute arbitrary code by using a specially crafted pattern file, due to an integer overflow in dstring.c’s dsfgetstr function which results in an out-of-bounds heap write. NOTE: It is unclear whether there are common scenarios where the pattern file...

Astra Linux – Vulnerability in NTP

In NTP versions 4.2.8, 4.2.8p15, and 4.3.x, before 4.3.101, remote attackers could cause a denial of service memory consumption by sending packets. This occurs because memory is not released in situations where a CMAC key is used and associated with a CMAC algorithm in the ntp.keys file...

Astra Linux – vulnerability in linux-5.10, linux, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential UAF of struct nilfsscinfo in nilfssegctorthread The finalization of nilfssegctorthread can race with nilfssegctorkillthread, which terminates that thread; this may result in a use-after-free BUG as detected ...

Astra Linux – vulnerability in libyaml-libyaml-perl

YAML-LibYAML prior to 0.903.0 for Perl uses 2-arg open, allowing existing files to be modified...

Astra Linux – vulnerability in Chromium

Insufficient validation of untrusted input in Codecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially perform out of bounds memory access via a crafted video file. Chromium security severity: Low...

Astra Linux – vulnerability in vim

Vim is an open source, command line text editor. Prior to version 9.1.1551, a path traversal issue in Vim’s zip.vim plugin could allow overwriting of arbitrary files when opening specially crafted zip archives. The impact is low, as this exploit requires direct user interaction. However, successf...

Astra Linux – Vulnerability in git-lfs

Git LFS is an extension to Git for versioning large files. In Git LFS versions 0.5.2 through 3.7.0, when populating a Git repository’s working tree with the contents of Git LFS objects, certain Git LFS commands may write to files that are visible outside the current Git working tree if symbolic o...

Astra Linux – Vulnerability in python-git

GitPython versions before 3.1.54 contain a vulnerability where an arbitrary file overwrite is possible, due to a flaw in the Diffable.diff method. This method fails to validate git options passed through thekwargs parameter. Attackers can provide the --output argument via another parameter, or us...

Astra Linux - уязвимость в linux-5.15

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix missing iop in ntfsreadmft There is null pointer dereference because iop == NULL. The bug happens because we don't initialize iop for records in $Extend...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: A use-after-free issue was addressed in closefiletableids. A ksmbdfile can remain active after a logical close, while another session holds a temporary reference obtained through ksmbdlookupfd inode. Currently, ksmbdclosef...

Astra Linux – vulnerability in grub2

When reading the .mo file during grubmofileopen, grub2 fails to validate an integer overflow during the allocation of its internal buffer. A specially crafted .mo file can cause the buffer size calculation to overflow, resulting in out-of-bounds reads and writes. This flaw enables an attacker to...

Astra Linux – Vulnerability in Chromium

The use of “after free” in PDFium in Google Chrome before version 149.0.7827.53 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted PDF file. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Before version 150.0.7871.115, read and write access in Codecs using Google Chrome allowed a remote attacker to potentially exploit heap corruption through a crafted video file. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

A vulnerability was identified in GWP-ASan in Google Chrome prior to version 149.0.7827.53, allowing a local attacker to obtain potentially sensitive information from process memory through a malicious file. Chromium security severity: Medium...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ext4: fixed the iloc.bh leak in ext4xattr inodeupdateref. The error branch of ext4xattr inodeupdateref forgot to release the refcount for iloc.bh. This issue was discovered during code review...

Astra Linux – vulnerability in freerdp3

FreeRDP versions prior to 3.29.0 fail to properly validate server-supplied RDPDR paths during drive redirection, enabling attackers to access prefix-sibling paths outside the configured shared root. A malicious RDP server can read, write, delete, and enumerate files in sibling directories by...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: jfs: Truncating of good inode pages occurs when the hard link is 0. The value of the fileset for the inode copy from the disk by the reproducer is AGGRRESERVEDI. When evicting, its hard link number is 0, so its inode pages are no...