143332 matches found
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: iouring/eventfd: Ensure that ioeventfdsignal delays another RCU period. The function ioeventfddosignal is invoked from an RCU callback. However, when the reference to ioevfd is dropped, it directly calls ioeventfdfree if the...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: Wifi: mwifiex: fixed a memory leak in mwifiexhistogramread. Always free the zeroed page upon returning from ‘mwifiexhistogramread’...
Astra Linux – Vulnerability in Chromium
Before version 148.0.7778.96, using WebCodecs in Google Chrome allowed a remote attacker to perform an out-of-bounds memory read through a crafted video file. Chromium security severity: Medium...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: Staging: rtl8723bs – The data in rtwgetieex was properly validated. Just like in commit 154828bf9559 “Staging: rtl8723bs: fix out-of-bounds read in rtwgetie parser”, we don’t trust the data in the frame. Therefore, we should chec...
Astra Linux – Vulnerability in krb5
In MIT Kerberos 5 also known as krb5, prior to version 1.22.3, there was an integer underflow issue, which could lead to out-of-bounds reads if an application called gssacceptseccontext on a system where the NegoEx mechanism was registered in /etc/gss/mech. An unauthenticated remote attacker coul...
Astra Linux – Vulnerability in Chromium
Before version 146.0.7680.153, read and write operations in WebGL in Google Chrome allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium security severity: Critical...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerability has been resolved: Bonding: A buffer overflow issue was fixed in the bondoptionarpiptargetsset function. In this function, if newval-string is an empty string, newval-string+1 will point to the byte after the string, leading to a buffer overflow an...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: BPF: Fixed the bpfxdpstorebytes proto for read-only arguments. While making some maps in Cilium read-only from the BPF side, we noticed that the bpfxdpstorebytes proto is incorrect. In particular, the verifier threw the following...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: mmc: core: Avoid using the bitfield RMW for control flags related to claims/retunes. Move the control flags related to claims and retunes out of the bitfield to avoid unrelated side effects of RMW in asynchronous contexts. The...
Astra Linux – Vulnerability in gst-plugins-bad1.0
A out-of-bounds read vulnerability was discovered in the VA JPEG decoder within GStreamer’s gst-plugins-bad. The JPEG parser reads the segment length value from the bitstream without validating it against available data. A remote attacker could trick a user into opening a specially crafted JPEG...
Astra Linux – Vulnerability in imagemagick
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, when writing an IPTC output file, a malicious input file could cause an out-of-bounds read of a single byte. This issue has been fixed in versions 6.9.13-47 and...
Astra Linux – Vulnerability in f2fs-tools
There is an exploitable information disclosure vulnerability in the devread functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can lead to an uninitialized read operation, resulting in information disclosure. An attacker can provide a malicious file to trigger this...
Astra Linux – Vulnerability in libxpm
A flaw was discovered in libXpm. A local user with low privileges could exploit an Out-of-Bounds Read vulnerability in the xpmNextWord function by processing a specially crafted or very small XPM X PixMap image file. This improper validation of file boundaries can allow an internal pointer to rea...
Astra Linux – Vulnerability in Chromium
Before version 102.0.5005.61, using the out-of-bounds read feature in DevTools in Google Chrome allowed a remote attacker to perform an out-of-bounds memory read through specific user interactions...
Astra Linux – Vulnerability in Apache2
Buffer Over-read vulnerability in Apache HTTP Server due to outbound OCSP requests sent to an attacker-controlled OCSP server This issue affects Apache HTTP Server versions 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which addresses this vulnerability...
Astra Linux – Vulnerability in mbedtls
A issue was discovered in Mbed TLS before version 2.24.0 and before versions 2.16.8 LTS and 2.7.17 LTS. There is a lack of zeroization of plaintext buffers in mbedtlssslread, which is necessary to erase unused application data from memory...
Astra Linux – Vulnerability in Vim
Out-of-bounds read in the GitHub repository for Vim before version 8.2...
Astra Linux – Vulnerability in Samba
A out-of-bounds read vulnerability was discovered in Samba due to insufficient length checks in the winbinddpamauthcrap.c file. When performing NTLM authentication, the client sends cryptographic challenges back to the server. These responses have varying lengths, and Winbind fails to check the...
Astra Linux – Vulnerability in Chromium
In Google Chrome, a vulnerability existed before version 124.0.6367.60 that allowed a remote attacker to obtain potentially sensitive information from process memory through a crafted HTML page. Chromium security severity: Medium...