Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: netfilter: nftsetpipapo: Do not allow bad clones to leak into subsequent transactions. When memory allocation fails, the cloned nftpipapomatch structure may enter a corrupted state: - Some fields’ lookup tables may be resized,...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: wl1251 – Validating packet IDs before indexing TXframes The wl1251txpacketcb function uses the firmware completion ID directly to index the fixed 16-element wl-txframes array. The ID is a raw u8 value from the completion...

Astra Linux – Vulnerability in Apache2

Improper null termination and out-of-bounds read vulnerabilities in the Apache HTTP Server. This issue affects the Apache HTTP Server version up to 2.4.66. Users are recommended to upgrade to version 2.4.67, as this fix addresses the vulnerability...

Astra Linux – Vulnerability in xorg-server

A out-of-bounds read flaw was discovered in the X.Org X server and Xwayland within the glXDispChangeDrawableAttributes function. A incorrect size validation check allows a client-controlled number of bytes to be read, exceeding the request buffer, resulting in information disclosure. A write path...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: afunix: Update unixsksk-oobskb under the skreceivequeue lock. Billy Jheng Bing-Jhong reported a race condition between unixgc and queueoob. unixgc attempts to garbage-collect closed inflight sockets. If the socket contains MSGOOB...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsetpipapo: A stack-out-of-bounds read occurred in pipapodrop. In pipapo Drop, rulemapi + 1.n is passed to pipapounmap as the tooffset argument during each iteration, including the last iteration where i ==...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ksmbd: smbdirect: validate the dataoffset and datalength fields of the smbdirectdatatransfer structure. If the dataoffset and datalength fields of the smbdirectdatatransfer structure are invalid, an out-of-bounds issue may occur...

Astra Linux – Vulnerability in imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, there was a heap out-of-bounds read vulnerability in the coders/dcm.c module. When processing DICOM files with certain configurations, the decoder loop...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: tls: In the tls.AppendFrag function, there is a potential out-of-bounds write vulnerability. This issue was detected using syzkaller and a local syzbot instance running on top of a netdevsim TLS offload emulation. The...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: nfc: fdp: Bound the device-reported read length and fixed an skb leak. fdpncii2cread takes the next packet length from two bytes provided by the device and never validates it. This value is used as the count for i2cmasterrecv ...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ALSA: dummy: Check card index validity at probe The snddummyprobe function blindly trusts that the given devptr-id value is within the proper card index range. It’s fine for the devices created by the driver during the module pro...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: fixed an out-of-bounds read in joyconctlreadhandler. The joyconctlreadhandler function casts an incoming HID input report into struct joyconinputreport and parses it. This casting is only guarded with a 12-byte...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: jfs: Fixed an out-of-bounds issue in dbNextAG and diAlloc. In dbNextAG, there was no check for the case where bmp-dbnumag is greater than or equal to MAXAG due to a corrupted image, which could lead to an out-of-bounds...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: nilfs2: The slab-out-of-bounds issue in nilfsdirectpropagate after truncation has been fixed. Shuangpeng Bai reported that KASAN detected a slab-out-of-bounds error in nilfsdirectpropagate during testing. Analysis revealed that...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: nfc: st21nfca: validate the ATRREQ length against the received frame The st21nfcatmrecvatrreq function checks that the received ATRREQ frame is at least ST21NFCAATRREQMINSIZE in length, and that the self-declared atrreq-length is...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix OOB write in sndusbmidius122loutput The sndusbmidius122loutput function selects a count of 2 whenever the transfer speed is slower than high-speed. It never checks whether this count corresponds to...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: validate option length before reading the conf opt value The l2capgetconfopt function derives the option length from the attacker-controlled opt-len field. It immediately dereferes opt-val as a u8, using...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fixed the issue where reading ucode could lead to out-of-bounds access warnings...

Astra Linux – Vulnerability in CGal

There are multiple code execution vulnerabilities in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which may result in code execution. An attacker can provide malicious input to trigger an...

Astra Linux – Vulnerability in Bouncycastle

Bouncy Castle for Java before version 1.73 contains a potential Denial of Service DoS issue within the Bouncy Castle org.bouncycastle.openssl.PEMParser class. This class parses OpenSSL PEM-encoded streams containing X.509 certificates, PKCS8-encoded keys, and PKCS7 objects. Parsing a file that...