Astra Linux – vulnerability in linux-5.10, linux-6.1, linux, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix f2fsbugon when uninstalling filesystem call f2fsevictinode. Creating a large file during checkpoint disable until it runs out of space, then deleting it, and finally remounting to re-enable checkpoint triggers f2fsbugon...

Astra Linux – Vulnerability in libdbi-perl

A issue was discovered in the DBI module through version 1.643 for Perl. DBD::File drivers can open files from folders other than those specifically specified via the fdir attribute in the data source name DSN. NOTE: This issue exists due to an incomplete fix for CVE-2014-10401...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: Firmware: csdsp: Return error if block header overflows file Return an error from csdsppowerup if a block header is longer than the amount of data remaining in the file. The previous code in csdspload and csdsploadcoeff would loo...

Astra Linux – vulnerability in Chromium

In PDFium in Google Chrome prior to version 154.0.8037.57, use of “after free” allowed a remote attacker to execute arbitrary code within the sandbox by using a specially crafted PDF file. Chromium security severity: High...

Astra Linux – Vulnerability in cifs-utils

It was discovered that cifs-utils’ mount.cifs function invoked a shell when requesting the Samba password, which could be exploited to inject arbitrary commands. An attacker who had special permissions, such as those through sudo rules, could use this vulnerability to escalate their privileges...

Astra Linux – vulnerability in openimageio

A code execution vulnerability exists in the DDS scanline parsing functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted .dds can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

Astra Linux – vulnerability in linux-5.10, linux

In the Linux kernel, the following vulnerability has been resolved: cifs: potential buffer overflow in handling symlinks Smatch printed a warning: arch/x86/crypto/poly1305glue.c:198 poly1305updatearch error: memcpy 'dctx-buf' too small 16 vs u32max This occurs because Smatch marks ‘linklen’ as...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: nfsd: When trying to queue dlrecall, if the call to nfsd4runcb fails, the reference count of dlstid is not decremented. This leads to a memory leak as follows: Unreferenced object 0xffff88812067b578 size 344: Comm “nfsd”, pid 276...

Astra Linux – Vulnerability in libde265

Libde265 v1.0.4 contains a heap buffer overflow in the putqpel00fallback16 function, which can be exploited through a specially crafted file...

Astra Linux – Vulnerability in libde265

Libde265 v1.0.4 contains a segmentation fault in the applysaointernal function, which can be exploited through a properly crafted file...

Astra Linux – vulnerability in libde265

LibDe265 v1.0.4 contains a heap buffer overflow in the mcluma function, which can be exploited via a specially crafted file...

Astra Linux – vulnerability in libde265

LibDe265 v1.0.4 contains a heap buffer overflow vulnerability in the putepel16fallback function, which can be exploited by using a specially crafted file...

Astra Linux – vulnerability in libde265

Libde265 v1.0.8 was found to contain an unknown crash caused by ffhevcputhevcqpelh3v3sse in sse-motion.cc. This vulnerability enables attackers to trigger a Denial of Service DoS condition by using a specially crafted video file...

Astra Linux – Vulnerability in OpenVSwitch

It has been discovered that openvswitch 2.17.8 contains a memory leak due to the xmalloc function in openvswitch-2.17.8/lib/util.c...

Astra Linux – vulnerability in Zabbix

An arbitrary file read vulnerability exists in the Zabbix Web Service Report Generation component, which listens on port 10053. The service fails to perform proper validation of URL parameters prior to reading files...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: nfs: fix panic when nfs4fflayoutprepareds fails We’ve been seeing the following panic in production BUG: kernel NULL pointer dereference, address: 0000000000000065 PGD 2f485f067 P4D 2f485f067 PUD 2cc5d8067 PMD 0 RIP:...

Astra Linux – vulnerability in docker.io-app

Moby is an open source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon versions 28.5.2 and prior, and Moby Daemon prior to version 2.0.0-beta.14, a race condition during docker cp mount setup allows a malicious container to create empty files or directories at arbitra...

Astra Linux – vulnerability in Imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, in ReadSFWImage coders/sfw.c, when temporary file creation fails, readinfo is destroyed before its filename member is accessed, resulting in a NULL pointer...

Astra Linux – Vulnerability in libde265

It was discovered that Libde265 v1.0.8 contains a heap-buffer-overflow vulnerability through the ffhevcputhevcepelpixels8sse function in sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service DoS attack using a crafted video file...

Astra Linux – vulnerability in linux-6.1, linux, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: cifs: fix underflow in parseserverinterfaces In this loop, we step through the buffer and after each item we check if the sizeleft is greater than the minimum size we need. However, the problem is that “bytesleft” is type ssizet...