ROS-2-2092

2.2092 Multiple vulnerabilities in libwebp 1. Vulnerability Description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

ROS-2-4813

2.4813 Notification on the update of the Red OS OPERATIONAL SYSTEM MIS Due to quality improvement and bug fixing, an updated version of the "RED OS" Operating System "RED OS" 7.3 is released. You can contact the technical support service within the framework of your existing technical support...

ROS-2-3126

2.3126 Notification on the update of the Red OS OPERATING SYSTEM MIS RED SOFT LLC notifies about renewal of the previously obtained certificate of conformity of FSTEC of Russia 4060 till 12.01.2029 of the operating system "RED OS", decimal number RU.29926343.02.01-01. You can contact the technica...

ROS-2-2118

2.2118 PyYAML parser vulnerability CVE-2020-14343 1. Vulnerability description: A vulnerability in the PyYAML parser, is related to insufficient validation of user input when processing unreliable YAML files using the fullload method or the FullLoader loader. Exploitation of the vulnerability...

ROS-2-5212

2.5212 Notice of Update for the RED OS Operating System RU “RED SOFT” LLC announces the extension of the validity period of the previously received compliance certificate issued by FSTEK Russia No. 4060 until 01.01.2029. The operating system is “RED OS”, decimally numbered RU.29926343.02.01-01. F...

ROS-20260703-73-0021

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260703-73-0005

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260703-73-0028

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260702-73-0046

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260702-73-0065

The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...

ROS-20260702-73-0071

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260702-73-0037

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260702-73-0086

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260702-73-0077

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260701-73-0055

The vulnerability of the smcclcsendconfirmaccept function in the net/smc/smcclc.c module of the CLC-handshaking TCP socket subsystem of the Linux operating system’s SMC kernel is related to the assignment of pointers due to an incorrect update of a reused resource. Exploiting this vulnerability c...

ROS-20260701-73-0013

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260630-73-0005

The vulnerability of the radeoncsparserinit function in the drivers/gpu/drm/radeon/radeoncs.c file of the Direct Rendering Infrastructure DRI driver for Linux-based graphics cards is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability can allow an attacker t...

ROS-20260630-73-0040

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260630-73-0042

The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...

ROS-20260630-73-0026

The vulnerability of the sndhdacregmapsync function in the sound/hda/hdacregmap.c module of the Linux kernel’s audio subsystem is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20260630-73-0037

The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...

ROS-20260629-73-0031

The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...

ROS-20260629-73-0027

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260629-73-0020

The vulnerability in Vim relates to the failure to take measures to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

ROS-20260629-73-0048

The vulnerability of the maxcorrectedreaderrorsstore function in the drivers/md/md.c module of the Linux device driver for multiple devices RAID and LVM involves copying buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability can allow a...

ROS-20260629-73-0036

The vulnerability in Linux firmware is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

ROS-20260625-73-0013

The vulnerability of the Transport Layer Security library GnuTLS is related to its algorithmic complexity. Exploiting this vulnerability could allow a malicious actor to cause service failures...

ROS-20260625-73-0022

The vulnerability in Apache Kafka is related to incorrect checking of the specified index, position, or offset in the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260625-73-0029

The vulnerability of the FFmpeg multimedia library is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause a service failure by using a corrupted audio file...

ROS-20260623-73-0044

The vulnerability of the bytes.decode function in the CPython interpreter relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ROS-20260623-73-0045

The vulnerability of the bytes.decode function in the CPython interpreter relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ROS-20260623-73-0041

The vulnerability of the bytes.decode function in the CPython interpreter relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ROS-20260623-73-0020

Vulnerability in Python 3.11 related to insufficient verification of data authenticity. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

ROS-20260623-73-0018

Vulnerability in Python 3.9 related to insufficient verification of data authenticity. Exploitation of this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260623-73-0048

The vulnerability of the pgAdmin 4 database management tool is related to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker to gain access to LDAP account information remotely...

ROS-20260623-73-0027

Vulnerability in Python 3.12 related to the failure to address CRWL sequences. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260623-73-0028

Vulnerability in Python 3.13 related to the failure to address CRWL sequences. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260623-73-0025

Vulnerability in Python 3.10 related to the failure to address CRWL sequences. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260623-73-0030

The vulnerability of the FileLoader class in the CPython interpreter relates to the disclosure of information in the error-prone data area. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

ROS-20260623-73-0023

The vulnerability in Python3 is related to the failure to take measures to neutralize CRLF sequences. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260623-73-0001

The vulnerability of the skmsgfree function in the net/ipv4/afinet.c file of the Linux operating system’s kernel is related to the unlimited distribution of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260622-73-0047

The vulnerability in the incus is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...

ROS-20260622-73-0022

The vulnerability in Thunderbird is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260622-73-0024

The vulnerability in libheif is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260622-73-0043

The vulnerability of the ngxhttpmp4module module in NGINX Open Source web servers is related to integer overflow. Exploiting this vulnerability can allow attackers to cause service failures...

ROS-20260622-73-0039

The vulnerability in the mongo-c-driver is related to errors in pointer assignment. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260622-73-0045

The vulnerability of the ngxmailauthhttpmodule module in NGINX Plus and NGINX Open Source is related to the use of the NULL pointer. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

ROS-20260622-73-0040

The vulnerability of the h.265 Libde265 implementation lies in the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260622-73-0037

The vulnerability of the built-in reverse proxy server in the Go programming language is related to insufficient checking of requests on the server side. Exploiting this vulnerability allows a remote attacker to perform an SSRF attack...

ROS-20260622-73-0031

The vulnerability of GOMODPROXY and GOSUMDB modules written in the Go programming language is related to improper verification of the cryptographic signature. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain access to read and modify data...