Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ELF: fix kernel.randomizevaspace double read The ELF loader uses “randomizevaspace” twice. It is a sysctl that can be changed at any time; thus, two loads might see two different values, leading to unpredictable consequences...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: rcu: Fix buffer overflow in printcpustallinfo The rcuc-starvation output from printcpustallinfo may overflow the buffer if there is a large difference in jiffies. The situation may seem unlikely, but computers sometimes get very...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: fix error recovery leading to data corruption on ESE devices Extent Space Efficient ESE or thin provisioned volumes must be formatted on demand during normal IO processing. The dasdeseneedsformat function checks for...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index out of bounds in degamma hardware format translation This fix addresses an index out of bounds issue in the cmhelpertranslatecurvetodegammahwformat function. The issue may arise when the index ‘i’ excee...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: check A-MSDU format more carefully If it appears that another subframe is present in the A-MSDU but the header is missing entirely, we may read data beyond the expected boundaries, only to discard it later. Be a b...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: cleanup FB if dpuformatpopulatelayout fails If dpuformatpopulatelayout fails, then FB is prepared but not cleaned up. This results in the pincount being leaked from the GEM object, causing a crash during DRM file...

Astra Linux – vulnerability in gst-plugins-base1.0

GStreamer is a library for constructing graphs of media-handling components. A out-of-bounds read vulnerability has been detected in the formatchannelmask function within gst-discoverer.c. The vulnerability affects the local array position, which is defined with a fixed size of 64 elements...

Astra Linux – vulnerability in hdf5

An issue was found in HDF5 up to version 1.12.0. A NULL pointer dereference exists in the function H5Fgetnrefs located in H5Fquery.c. This allows an attacker to cause a Denial of Service...

Astra Linux – vulnerability in hdf5

The HDF5 Library up to version 1.14.3 contains a SEGV within H5VMmemcpyvv in H5VM.c...

Astra Linux – vulnerability in hdf5

Versions 1.14.2 through 1.14.3 of HDF5 contain a heap buffer overflow in H5Aattrreleasetable, which corrupts the instruction pointer and can lead to denial of service or arbitrary code execution...

BELL-CVE-2025-1152

Bulletin has no description...

CVE-2023-40721: Use of Externally-Controlled Format String

A use of externally-controlled format string vulnerability CWE-134 vulnerability in Fortinet allows a privileged attacker to execute arbitrary code or commands via specially crafted requests...

Tracker Software PDF-XChange Editor security vulnerabilities

Tracker Software PDF-XChange Editor is a suite of software for viewing and editing PDF format files from Tracker Software, a Canadian company. A security vulnerability exists in Tracker Software PDF-XChange Editor that stems from the RTF file parsing module containing a heap-based buffer overflow...

Tracker Software PDF-XChange Editor Buffer Error Vulnerability

Tracker Software PDF-XChange Editor is a suite of software for viewing and editing documents in PDF format from Tracker Software, a Canadian company. Tracker Software PDF-XChange Editor suffers from a buffer error vulnerability that stems from the JB2 file parsing module containing an out-of-boun...

Fortinet Fortigate - Format string vulnerability in CLI commands (FG-IR-23-261)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-23-261 advisory. - A use of externally-controlled format string vulnerability CWE-134 in Fortinet FortiOS version 7.4.0 through 7.4.1 and befo...

PT-2025-6253 · Fortinet · Fortiproxy +3

Name of the Vulnerable Software and Affected Versions: Fortinet FortiOS versions 7.4.0 through 7.4.1 and prior to 7.2.6 FortiProxy versions 7.4.0 and prior to 7.2.7 FortiPAM versions 1.1.2 and prior to 1.0.3 FortiSwitchManager versions 7.2.0 through 7.2.2 and prior to 7.0.2 Description: A use of...

FortiOS / FortiProxy / FortiPAM / FortiSwitchManager - Format string vulnerability in CLI commands

A use of externally-controlled format string vulnerability CWE-134 in FortiOS, FortiProxy, FortiPAM & FortiSwitchManager CLI may allow a privileged attacker to execute arbitrary code or commands via specially crafted requests...

jinja2: Jinja has a sandbox breakout through indirect reference to format method

A flaw was found in the Jinja package. In affected versions of Jinja, an oversight in how the Jinja sandboxed environment detects calls to str.format allows an attacker that controls the content of a template to execute arbitrary Python code. To exploit the vulnerability, an attacker needs to...

ALPINE-CVE-2025-1153

A vulnerability classified as problematic was found in GNU Binutils 2.43/2.44. Affected by this vulnerability is the function bfdsetformat of the file format.c. The manipulation leads to memory corruption. The attack can be launched remotely. The complexity of an attack is rather high. The...

jinja2: Jinja has a sandbox breakout through indirect reference to format method

A flaw was found in the Jinja package. In affected versions of Jinja, an oversight in how the Jinja sandboxed environment detects calls to str.format allows an attacker that controls the content of a template to execute arbitrary Python code. To exploit the vulnerability, an attacker needs to...