5088 matches found
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Warns when a triple fault assertion never “escapes” from L2 The warnings are removed because they perform a sanity check that ensures KVM never allows a triple fault in L2 to escape and end up in L1. In normal operation...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: net: iptunnel: ensure that the inner header is pulled in iptunnelrcv The same fixes were applied in the following issues: 8d975c15c0cd “ip6tunnel: ensure that the inner header is pulled in ip6tnlrcv” 1ca1ba465e55 “geneve: ensu...
Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: x86/fpu: No longer rely on user space for information that could lead to faults in the xsave buffer. Before this change, the expected size of the user space buffer was taken from fxsw-xstatesize. fxsw-xstatesize can be changed fr...
Astra Linux – Vulnerability in Python-Django
In Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1, directory traversal is allowed if the filenames are passed to it directly...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: vfio/pci: fixed a memory leak during the transition from D3hot to D0 If the variable ‘vfiopcicoredevice::needspmrestore’ is set i.e., the PCI device does not have the NoSoftReset bit set in its PMCSR configuration register, then...
Astra Linux – Vulnerability in Firefox
If a user saved a response from the Network tab in Devtools using the “Save As” context menu option, the file might not have been saved with the .download file extension. This could have allowed the user to run a malicious executable inadvertently. This vulnerability has been fixed in Firefox 140...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Reworked the handling of long task execution when adding/ deleting entries. When adding or deleting a large number of elements in one step using ipset, it may take considerable time, and soft lockup errors can...
CVE-2023-24288
A flaw was found in Portable Puzzle Collection. A local attacker could exploit this vulnerability by creating an excessive amount of save states. This could lead to a Denial of Service DoS, making the application unavailable to legitimate users. Mitigation Mitigation for this issue is either not...
CVE-2023-24288
An issue in Portable Puzzle Collection before 20230116.5782e29 allows attackers to cause a Denial of Service DoS via creating an excessive amount of save states...
CVE-2023-24284
Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the ismarkable function...
CVE-2023-24285
Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow which is triggered when an unusually long move is executed...
CVE-2023-24286
Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the game description parameter...
UBUNTU-CVE-2023-24291
Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the record length parameter...
CVE-2023-24291
Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the record length parameter...
UBUNTU-CVE-2023-24285
Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow which is triggered when an unusually long move is executed...
CVE-2023-24288
An issue in Portable Puzzle Collection before 20230116.5782e29 allows attackers to cause a Denial of Service DoS via creating an excessive amount of save states...
UBUNTU-CVE-2023-24287
Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the "M" command...
UBUNTU-CVE-2023-24288
An issue in Portable Puzzle Collection before 20230116.5782e29 allows attackers to cause a Denial of Service DoS via creating an excessive amount of save states...