22499 matches found
Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: staticcall: Properly handle module initialization failures in staticcalldelmodule. Module insertion invokes staticcalladdmodule to initialize the static calls within a module. staticcalladdmodule calls staticcallinit, which...
Astra Linux – Vulnerability in p7zip
7-ZIP ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected 7-ZIP installations. Interaction with this product is required to exploit this vulnerability, but the attack vectors may vary depending ...
Astra Linux – Vulnerability in Linux
A issue was discovered in the Linux kernel before 5.11.3 when a webcam device is present. The videousercopy function in drivers/media/v4l2-core/v4l2-ioctl.c has a memory leak for large arguments, identified as CID-fb18802a338b...
Astra Linux – Vulnerability in binutils
The bfdgenericreadminisymbols function in syms.c within the Binary File Descriptor BFD library also known as libbfd, as part of GNU Binutils 2.31, contains a memory leak that can occur due to an improperly crafted ELF file. This leads to a denial of service condition due to excessive memory...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in geolocation in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/sec – Fixed memory leak during sec resource release The AIV is one of the SEC resources. When releasing resources, it is necessary to release the AIV resources at the same time. Otherwise, memory leakage will...
Astra Linux – Vulnerability in libxml-parser-perl
Versions of XML::Parser from 2.45 onwards for Perl may overflow the pre-allocated buffer size, leading to heap corruption double-free or corruption and crashes. The A:utf8 PerlIO layer, using the parsestream function in Expat.xs, may cause the XML input buffer to overflow. This is because Perl’s...
Astra Linux – Vulnerability in Chromium
The use of “after free” in PDFium in Google Chrome before version 148.0.7778.216 allowed a remote attacker to potentially exploit heap corruption through a crafted PDF file. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Before version 149.0.7827.53, using Autofill in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: NFSv4/pnfs: The key for the data server cache in the NFS version. The nfs4pnfsdsadd function keys the per-net data server cache on the multipath address set alone, and the struct nfs4pnfsds record does not specify a version...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Prevent access to vCPU events before init Another day, another syzkaller bug. KVM erroneously allows userspace to pend vCPU events for a vCPU that hasn't been initialized yet, leading to KVM interpreting a bunch of...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: ext2: reject inodes with zero inlink and valid mode in ext2iget ext2iget already rejects inodes with inlink == 0 when imode is zero or idtime is set, treating them as deleted. However, the case of inlink == 0 with a non-zero mode...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: drivers/md/md-bitmap: Check the return value of mdbitmapgetcounter. Check the return value of mdbitmapgetcounter in case it returns a NULL pointer, which would lead to a null pointer dereferencing. v2: Update the check to include...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: ocfs2: Synchronize heartbeat callbacks with o2net teardown This patch belongs to the series “ocfs2: Hardening heartbeat teardown races”. This series addresses two OCFS2 heartbeat/o2net teardown races detected by KASAN. This patch...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: A low-value MPA length field was rejected during signed receive math calculations. A malicious connected SIW peer can send an iWARP FPDU whose MPA length field chdr-mpalen, 16-bit big-endian, peer-controlled is smaller...
Astra Linux – Vulnerability in freerdp3
FreeRDP prior to version 3.29.0 affected versions ≤ 3.28.0 contains a divide-by-zero vulnerability in the rdpecam camera redirection client. The ecamdevprocessstartstreamsrequest function parses a server-controlled CAMMEDIATYPEDESCRIPTION from a StartStreamsRequest PDU, but it only validates Form...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: ALSA: In the seq function, there is a issue where closing a re-opened queue timer occurs in the destructor. The queuedelete function closes the queue timer and then frees it. The sndseqtimerclose function clears q-timer-timeri. T...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: net: strparser: Fixed a memory leak in strpabortstrp. When the stream parser is aborted, for example after a message assembly timeout, it may still retain a reference to the partially assembled message in strp-skbhead. This...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: amt: The pointer to the skb header is reread after each pull operation. Several AMT receive and transmit paths cache the pointer to the skb header iphdr, ipv6hdr, ethhdr, or the AMT message header, and then call a helper...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: nfsd: Fixed a heap overflow in the NFSv4.0 LOCK replay cache. The NFSv4.0 replay cache uses a fixed 112-byte inline buffer rpibufNFSD4REPLAYISIZE to store encoded operation responses. This size was calculated based on OPEN...
Astra Linux – Vulnerability in nss
During RSA key generation, bignum implementations used a variant of the Binary Extended Euclidean Algorithm, which involved significant input-dependent processes. This allowed attackers to perform electromagnetic-based side-channel attacks to capture traces that could lead to the recovery of secr...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
An integer overflow vulnerability was discovered in the vmwgfx driver, located in the vmxgfxexecbuf.c file within the GPU component of the Linux kernel. The vulnerability affects device files such as '/dev/dri/renderD128 or Dxxx'. This flaw allows a local attacker with a user account on the syste...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: kernel/printk/index.c: fixed the memory leak that occurred when using debugfslookup. When calling debugfslookup, the result must be passed to dput, otherwise a memory leak will occur over time. To simplify things, simply call...
Astra Linux – Vulnerability in exiv2
Exiv2 0.27.2 allows attackers to cause a crash in the Exiv2::getULong function in types.cpp, when called from Exiv2::Internal::CiffDirectory::readDirectory in crwimageint.cpp. This occurs because there is no validation of the relationship between the total size and the offset and size...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-sha204a – fixed blocking and non-blocking rng logic The blocking and non-blocking paths failed to provide valid entropy due to improper buffer management. Reading the buffer starting from byte 1 only fetched 32 byte...
Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: ftrace: Clean up the handling of hash operations when registers fail. The following GPF errors occur when registerftracedirect fails: General protection fault, likely due to a non-canonical address \ 0x200000000000010: 0000 1...
Astra Linux – Vulnerability in openjdk-11
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition products of Oracle Java SE component: Hotspot. The supported versions affected by this vulnerability are Oracle Java SE: 8u431-perf, 11.0.25, 17.0.13, 21.0.5, 23.0.1; Oracle GraalVM for JDK: 17.0.13...
Astra Linux – Vulnerability in Golang-1.19
The go command may generate unexpected code during build time when using cgo. This can lead to unexpected behavior when running a Go program that uses cgo. This issue may occur when running a trusted module that contains directories with newline characters in their names. Modules retrieved using...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: netfilter: conntrack – removed the use of sprintf. Replace it with scnprintf; the buffer sizes should be large enough to hold the result, eliminating the need for snprintf and overflow checks. Increase the buffer size in...
Astra Linux – Vulnerability in uriparser
A issue was discovered in uriparser through 0.9.7. The ComposeQueryEngine in UriQuery.c has an integer overflow due to long keys or values, resulting in a buffer overflow...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: fbdev: fbcon: A out-of-bounds read occurred in the errout section of fbcondosetfont. When fbcondosetfont fails e.g., due to a memory allocation failure within vcresize under heavy memory pressure, it jumps to the errout label to...
Astra Linux – Vulnerability in Linux 5.10
The checkaluop function in kernel/bpf/verifier.c in the Linux kernel, as of v5.16-rc5, did not properly update the bounds when handling the mov32 instruction. This issue allows local users to obtain potentially sensitive address information, also known as a “pointer leak.”...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fixed a reference count leak in dmardevscopeinit. The function foreachpcidev is implemented through pcigetdevice. The comment accompanying pcigetdevice states that it will increase the reference count of the returned...
Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: ice: xsk: disable txq irq before flushing hw iceqpdis intends to stop a given queue pair that is a target of xsk pool attach/detach. One of the steps is to disable interrupts on these queues. It currently is broken in a way that...
Astra Linux – Vulnerability in Chromium
The confused deputy in Fullscreen mode in Google Chrome before version 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and used social engineering to spoof UI elements through a crafted HTML page. Chromium security severity: Low...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: net/rds: Handle the cleanup after a zerocopy send occurs, before the message is queued. A zerocopy send can fail after user pages have been pinned, but before the message is attached to the sending socket. The purge path currentl...
Astra Linux – Vulnerability in WebKit2GTK
A flaw was discovered in WebKitGTK and WPE WebKit. This vulnerability allows for an out-of-bounds read and integer underflow, resulting in a UIProcess crash DoS through a crafted payload sent to the GLib remote inspector server...
Astra Linux – Vulnerability in WebKit2GTK
The issue was addressed through improved checks. This issue is fixed in Safari 18.2, iOS 18.2, iPadOS 18.2, iPadOS 17.7.6, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, and watchOS 11.2. Processing maliciously crafted web content may lead to an unexpected process crash...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd934x: Properly handles channel mapping lists. Currently, each channel is added as a list to the dai channel list. However, there is a risk of adding the same channel to multiple dai channel lists, which could lea...
Astra Linux – Vulnerability in Chromium
A heap buffer overflow in ANGLE in Google Chrome prior to version 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption through malicious network traffic. Chromium security severity: High...
Astra Linux – Vulnerability in Linux, Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: net: sched: flower: Protect flwalk with rcu. The patch that refactored flwalk to use idrforeachentrycontinueul also removed the rcu protection for individual filters. This caused a use-after-free when the filter was deleted...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: Wifi: cfg80211: The ID of the bound element is read when checking non-inheritance. The cfg80211iselementinherited function reads the first data octet of the candidate element id = elem-data0 in order to look it up in an extension...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerabilities have been resolved: net: nfc: Fixed races in nfcllcpsockget and nfcllcpsockgetsn. Sili Luo reported a race condition in nfcllcpsockget, which led to a Use-After-Value exception. The process of acquiring a reference to the socket found during a...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: TCP: IPv6: Clamping the default advertising MSS to avoid GSOBYFRAGS 0xFFFF. When the MTU is large, ip6defaultadvmss may return IPV6MAXPLEN 65535. This is interpreted by TCP as “mssclamp”, allowing the MSS to reach 65535. However,...
Astra Linux – Vulnerability in freerdp3
FreeRDP prior to version 3.29.0 affected versions ≤ 3.28.0 contains several vulnerabilities related to TLS certificate identity validation in functions like tlsverifycertificate, tlsmatchhostname, and x509Utilsietfgetdnsnames. Since FreeRDP performs custom matching of Common Name and DNS SAN...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: phonet/pep: fixed the use of racyskbqueueempty The receive queues are protected by their respective spin-locks, not the socket lock. This could lead to skbpeek returning NULL or a pointer to a socket buffer that has already been...
Astra Linux – Vulnerability in Qemu
No description...
Astra Linux – Vulnerability in Chromium
Insufficient validation of untrusted inputs in Google Lens in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...
Astra Linux – Vulnerability in Chromium
Before version 90.0.4430.72, using extensions in Google Chrome allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape through a crafted Chrome Extension...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: spi: tegra210-quad: Protect currxfer in tegraqspicombinedseqxfer The currxfer field is read by the IRQ handler without holding a lock. This allows the IRQ handler to check whether a transfer is in progress. When clearing the...