Lucene search
+L
AstralinuxRecent

20387 matches found

AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.28 views

Astra Linux – Vulnerability in Zabbix

The Zabbix Agent 2 item key “smart.disk.get” does not sanitize its parameters before passing them to a shell command, which may lead to a vulnerability for remote code execution...

9.8CVSS8.8AI score0.00753EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.7 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: vhost: vringh: Fixed the check on the return value of copytoiter. The return value of copytoiter cannot be negative; instead of checking for negative values, we should check whether the copied length is equal to the requested...

5.8AI score0.00201EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.7 views

Astra Linux – Vulnerability in WebKit2GTK

A memory management issue related to “use after free” operations has been addressed through improved memory management practices. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4, and iPadOS 15.4, as well as tvOS 15.4. Processing maliciously crafted web content may...

8.8CVSS7.9AI score0.01321EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.4 views

Astra Linux – Vulnerability in libraw

Buffer overflow vulnerability in the LibRaw::stretch function in libraw\src\postprocessing\aspectratio.cpp...

6.5CVSS6.2AI score0.00772EPSS
SaveExploits1References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.8 views

Astra Linux – Vulnerability in Chromium

Using “after free” in Ozone in Google Chrome before version 149.0.7827.103 allowed a local attacker to potentially exploit heap corruption through physical access to the device. Chromium security severity: Critical...

6.8CVSS5.9AI score0.00181EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.9 views

Astra Linux – Vulnerability in Thunderbird

Thunderbird unexpectedly enabled JavaScript in the composition area. The JavaScript execution context was limited to this area and did not receive Chrome-level privileges; however, it could be used as a stepping stone for further attacks involving other vulnerabilities. This vulnerability affects...

6.5CVSS7AI score0.01267EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.10 views

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: cgroup: The cgroupgetfromid function must check that the looked-up key is a directory. The cgroup object must be a kernfs directory; otherwise, a kernel panic will occur, especially when the cgroup ID is provided from the user...

5.3CVSS5.9AI score0.00227EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.8 views

Astra Linux - Vulnerability in Golang-1.19

Templates do not properly handle backticks as JavaScript string delimiters, and do not escape them as expected. Backticks have been used since ES6 for JavaScript template literals. If a template contains a Go template action within a JavaScript template literal, the contents of the action can be...

9.8CVSS6.8AI score0.02281EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.9 views

Astra Linux – Vulnerability in curl

A authentication bypass vulnerability exists in libcurl prior to v8.0.0. It reuses an previously established SSH connection, even though one SSH option has been modified, which should prevent such reuse. libcurl maintains a pool of previously used connections and can reuse them for subsequent...

7.7CVSS6.5AI score0.01255EPSS
SaveExploits1References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.7 views

Astra Linux – Vulnerability in gst-plugins-base1.0

GStreamer is a library for constructing graphs of media-handling components. A stack-buffer overflow has been detected in the vorbishandleidentificationpacket function within gstvorbisdec.c. The position array is a stack-allocated buffer of size 64. If vd-vi.channels exceeds 64, the for loop will...

9.8CVSS7.4AI score0.01274EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.8 views

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fixed the rxrpclocal leak in rxrpclookuppeer. It is necessary to call rxrpcPutlocal for the peer candidate before kfree, as it holds a reference to rxrpclocal. DH: v2: The peer freeing code has been abstracted into a...

5.5CVSS5.9AI score0.00235EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.11 views

Astra Linux – Vulnerability in imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a memory leak existed in coders/msl.c. In the WriteMSLImage function of the msl.c file, resources are allocated. However, this function returns early without...

5.3CVSS7.2AI score0.00325EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.9 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: nbd: Always initialize struct msghdr completely. syzbot reports that the value of msg-msggetinq may be uninitialized 1. The struct msghdr has many new fields recently. We should always ensure that their values are zero by...

4.4CVSS6.1AI score0.00222EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.9 views

Astra Linux – Vulnerability in Squid

Squid is a caching proxy for the Web. Due to a bug related to expired pointer references, Squid versions prior to 6.6 were vulnerable to a Denial of Service attack targeting error responses from the Cache Manager. This vulnerability allowed a trusted client to cause a Denial of Service attack by...

6.5CVSS6.5AI score0.6005EPSS
SaveExploits1References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.7 views

Astra Linux – Vulnerability in Pixman

In libpixman in Pixman before version 0.42.2, there is an out-of-bounds write also known as a heap-based buffer overflow in the rasterizeedges8 function, due to an integer overflow in the pixmansamplefloory function...

8.8CVSS7.3AI score0.01524EPSS
SaveExploits1References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.9 views

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: can: j1939: prevents deadlock by changing j1939sockslock to rwlock. The following 3 locks may race against each other, causing a deadlock situation in the Syzbot bug report: - j1939sockslock - activesessionlistlock -...

5.5CVSS6.2AI score0.00183EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.13 views

Astra Linux – Vulnerability in Linux 5.10, Linux

The mm/mremap.c file in the Linux kernel before version 5.13.3 contains a use-after-free issue due to a stale Translation Look-And-Reduce TLB table, as the rmap lock is not held during a PUD move...

7CVSS6.5AI score0.00469EPSS
SaveExploits1References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.12 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: btrfs: Fixed a race condition related to bitfield writes in btrfsclearspaceinfofull. According to the memory-barriers.txt document regarding memory barrier ordering guarantees: - These guarantees do not apply to bitfields, as...

5.5CVSS6AI score0.0018EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.18 views

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: Added a missing check for allocorderedworkqueue. Added a check on the return value of allocorderedworkqueue, as it may return a NULL pointer, leading to a NULL pointer dereferencing issue. Patchwork:...

5.5CVSS5.3AI score0.00156EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.4 views

Astra Linux – Vulnerability in Zabbix

Duktape is a third-party embeddable JavaScript engine, focusing on portability and minimal footprint. When adding too many values in the valstack, JavaScript can crash. This issue arises due to a bug in Duktape 2.6, which is a third-party solution that we use...

7.5CVSS7.2AI score0.00758EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.6 views

Astra Linux – Vulnerability in exiv2

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A out-of-bounds read vulnerability was discovered in Exiv2 versions v0.27.3 and earlier. This vulnerability occurs when Exiv2 is used to write metadata into a specially craft...

5.5CVSS6.6AI score0.01568EPSS
SaveExploits1References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.7 views

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: atm: clip: Fixed NULL pointer dereferencing in vccsendmsg atmarpddevops does not implement the send method, which may cause crashes as described below. BUG: NULL pointer dereferencing in the kernel, address: 0000000000000000 P...

5.5CVSS6.1AI score0.00166EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.7 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: scsi: sd: A “off-by-one” error has been fixed in sdreadBlockcharacteristics. If the device returns page 0xb1 with a length of 8 this occurs with QEMU v2.x, for example, sdReadBlockCharacteristics may attempt an out-of-bounds...

8.6CVSS6.3AI score0.00536EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.13 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: net/sched: fixed the lockdep issue in qdisctreereducebacklog qdisctreereducebacklog is called with the qdisc lock held, not RTNL. We must use qdisclookuprcu instead of qdisclookup syzbot reported: WARNING: suspicious RCU usage...

5.5CVSS6.3AI score0.00172EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.8 views

Astra Linux – Vulnerability in xrdp

xrdp is an open-source project that provides a graphical login interface for accessing remote machines using the Microsoft Remote Desktop Protocol RDP. Version 0.9.21 and earlier of xrdp contain a buffer overflow in the xrdploginwndcreate function. There are no known solutions to this issue. User...

9.8CVSS8.1AI score0.00804EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.8 views

Astra Linux – Vulnerability in Firefox

Potential race conditions in IndexedDB could have caused memory corruption, resulting in a potentially exploitable crash. This vulnerability affects Firefox 132 and Thunderbird 132...

9.8CVSS5.9AI score0.00393EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.4 views

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Do not leak memory if devsetname fails. When devsetname fails, zcdncreate does not free the newly allocated resources. Fix this issue...

5.5CVSS5.2AI score0.00145EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.14 views

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: KVM: Do not dereference ops-destroy directly. The cleanup of a KVM device occurs through either of two callbacks: 1 destroy, called when the VM is being destroyed; 2 release, called when a device file descriptor is closed. Most K...

5.5CVSS5.5AI score0.00297EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.8 views

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: drm/msm/dsi: fixed memory corruption caused by too many bridges. Added a missing sanity check on the bridge counter to prevent corruption of data beyond the fixed-sized bridge array, in case there are ever more than eight...

7.8CVSS5.7AI score0.00215EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.5 views

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: net: phy: The register Phy ledtriggers operation occurs during the PHY probe, to avoid an AB-BA deadlock. An AB-BA deadlock occurs when both LEDsTRIGGERNETDEV and LEDTRIGGERPHY are enabled. c 1362.049207...

5.5CVSS4.6AI score0.00099EPSS
SaveExploits0References1
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.7 views

Astra Linux – Vulnerability in Firefox and Thunderbird

An iframe that was not permitted to run scripts could do so if the user clicked on a javascript: link. This vulnerability affects Firefox 102, Firefox ESR 91.11, Thunderbird 102, and Thunderbird 91.11...

8.8CVSS6.9AI score0.00937EPSS
SaveExploits0References1
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.11 views

Astra Linux – Vulnerability in libsdl2, libsdl1.2

There is a heap overflow issue in the video/SDLpixels.c file in SDL Simple DirectMedia Layer versions 2.x to 2.0.18. By creating a malicious .BMP file, an attacker can cause the application using this library to crash, result in a denial of service, or lead to code execution...

8.8CVSS7AI score0.02055EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.11 views

Astra Linux – Vulnerability in libxstream-java

XStream is a simple library for serializing objects to XML and back again. In affected versions, this vulnerability may allow a remote attacker to request data from internal resources that are not publicly available, by manipulating the processed input stream with a Java runtime version 14 to 8. ...

8.5CVSS7.1AI score0.11377EPSS
SaveExploits2References1
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.8 views

Astra Linux – Vulnerability in python-tornado

Tornado is a Python web framework and asynchronous networking library. In versions of Tornado prior to 6.5.5, the only limitation on the number of parts in multipart/form-data was the maxbodysize setting default: 100MB. Since parsing occurs synchronously on the main thread, this created a potenti...

8.7CVSS7.9AI score0.00375EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.9 views

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: netns: Ensure that getnetns handles zero refcount nets properly. Syzkaller encountered a warning: refcountt: Addition on 0; use-after-free. WARNING: CPU: 3 PID: 7890 at lib/refcount.c:25 refcountwarnsaturate+0xdf/0x1d0 Linked...

7.8CVSS6.5AI score0.00269EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.7 views

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: For the clk subsystem, in the qcom module, there is a issue where gcc-sm6350 uses parentmap for two clocks that actually doesn’t exist. If a clkrcg2 has a parent, it should also have the parentmap property defined. Otherwise, a...

5.5CVSS6.2AI score0.00184EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.9 views

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass the same-origin policy through a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.9AI score0.00202EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.9 views

Astra Linux – Vulnerability in Firefox

The browser might have misinterpreted the command as transferring a screen-sharing state to another tab, which could lead to the leakage of unintended information. This vulnerability affects Firefox versions earlier than 85...

6.5CVSS6.9AI score0.00877EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.9 views

Astra Linux – Vulnerability in Linux 5.10, Linux

The file drivers/usb/gadget/legacy/inode.c in the Linux kernel, up to version 5.16.8, improperly handles the release of dev-buf...

7.8CVSS6.5AI score0.00413EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.10 views

Astra Linux – Vulnerability in Firefox and Thunderbird

A violation of the same-origin policy could have allowed the theft of cross-origin URL entries, leading to the leakage of the results of a redirect, through the use of performance.getEntries. This vulnerability affects Firefox 106, Firefox ESR 102.4, and Thunderbird 102.4...

8.1CVSS7.1AI score0.00414EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.10 views

Astra Linux – Vulnerability in SOX

The readsamples function in hcom.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted hcom file...

5.5CVSS6.1AI score0.1411EPSS
SaveExploits4References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.16 views

Astra Linux – Vulnerability in Apache2

A encoding issue in the modproxy component of the Apache HTTP Server 2.4.59 and earlier versions allows request URLs with incorrect encoding to be sent to backend services, potentially bypassing authentication through crafted requests. Users are recommended to upgrade to version 2.4.60, which fix...

8.1CVSS6.7AI score0.25878EPSS
SaveExploits1References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.7 views

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in the appcache of Google Chrome prior to version 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive information from process memory through a crafted HTML page...

6.5CVSS6.9AI score0.01778EPSS
SaveExploits1References1
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.18 views

Astra Linux – Vulnerability in OpenSSH

The PKCS11 feature in ssh-agent in OpenSSH prior to version 9.3p2 has an insufficiently trustworthy search path, which can lead to remote code execution if the agent is forwarded to a system controlled by an attacker. The code located in /usr/lib is not necessarily safe for loading into ssh-agent...

9.8CVSS8AI score0.797EPSS
SaveExploits10References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.14 views

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: ocfs2: fixed the issue with preserving cleanup for reflinks. The commit c06c303832ec “ocfs2: fixed the error where xattr array entries were not properly handled” does not handle all cases, and the cleanup of preserved xattr...

5.5CVSS5.9AI score0.00123EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.6 views

Astra Linux – Vulnerability in jbig2dec

The jbig2imagecompose function in jbig2image.c in Artifex’s jbig2dec before version 0.18 has a heap-based buffer overflow issue...

9.8CVSS8.6AI score0.0274EPSS
SaveExploits1References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.14 views

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: AppArmor: Fixed the issue where an unprivileged local user could perform privileged policy management. An unprivileged local user can load, replace, and remove policies by opening the AppArmor interfaces. This can be achieved...

7.8CVSS5.9AI score0.00139EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.6 views

Astra Linux – Vulnerability in yaml-cpp

The function “Token& Scanner::peek” in scanner.cpp in yaml-cpp 0.5.3 and earlier allows remote attackers to cause a denial of service assertion failure and application exit via a ‘!2’ string...

7.5CVSS7.2AI score0.02222EPSS
SaveExploits1References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.7 views

Astra Linux – Vulnerability in libjpeg-turbo

LibJPEG 9c has a major issue with a large loop, as the readPixel function in rdtarga.c improperly handles EOF situations...

7.5CVSS6.3AI score0.02925EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.8 views

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.9AI score0.00229EPSS
SaveExploits0References2
Total number of security vulnerabilities20387