UBUNTU-CVE-2022-30787

An integer underflow in fuselibreaddir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite...

UBUNTU-CVE-2022-30785

A file handle created in fuselibopendir, and later used in fuselibreaddir, enables arbitrary memory read and write operations in NTFS-3G through 2021.8.22 when using libfuse-lite...

Tuxera NTFS-3G 代码注入漏洞

Tuxera NTFS-3G is an open source, cross-platform driver for reading and writing NTFS partitions from the Finnish company Tuxera.Tuxera NTFS-3G is vulnerable to code injection, which stems from the existence of arbitrary memory read and write issues in fuselibreaddir, and can be exploited by...

CVE-2022-30787

An integer underflow in fuselibreaddir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite...

PT-2022-3245 · Ntfs-3G +6 · Ntfs-3G +6

Name of the Vulnerable Software and Affected Versions: NTFS-3G versions through 2021.8.22 Description: The issue is related to a buffer overflow vulnerability in the NTFS file system descriptor for the FUSE NTFS-3G module, allowing arbitrary memory read and write operations. This can be exploited...

PT-2022-3223 · Ntfs-3G +7 · Ntfs-3G +7

Name of the Vulnerable Software and Affected Versions: NTFS-3G versions through 2021.8.22 when using libfuse-lite Description: The issue is related to an integer underflow in the fuse lib readdir function of the libfuse-lite library for the NTFS file system in the FUSE NTFS-3G module. This can...

Important: kernel

Issue Overview: A use-after-free flaw was found in kernel/trace/ringbuffer.c in Linux kernel. There was a race problem in traceopen and resize of cpu buffer running parallely on different cpus, may cause a denial of service problem DOS. This flaw could even allow a local attacker with special use...

GSD-2021-1002818 NFSD: Fix READDIR buffer overflow

NFSD: Fix READDIR buffer overflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.12 by commit eabc0aab98e5218ceecd82069b0d6fdfff5ee885, i...

FreeBSD Information Disclosure Vulnerability (CNVD-2021-14798)

FreeBSD is a set of Unix-like operating systems from the Freebsd Foundation. A security vulnerability exists in FreeBSD that allows a local attacker to read memory fragments via VOP READDIR to obtain sensitive information. No details of the vulnerability are provided at this time...

Freebsd FreeBSD 信息泄露漏洞

FreeBSD is a set of Unix-like operating systems from the Freebsd Foundation. A security vulnerability exists in FreeBSD that allows a local attacker to read memory fragments via VOP READDIR to obtain sensitive information. No details of the vulnerability are provided at this time...

OSV-2020-1365 UNKNOWN READ in cli_vba_readdir_new

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24354 Crash type: UNKNOWN READ Crash state: clivbareaddirnew clivbascandirnew cliscanole2...

kernel: Information leak when handling NM entries containing NUL

A vulnerability was found in the Linux kernel. Payloads of NM entries are not supposed to contain NUL. When such entry is processed, only the part prior to the first NUL goes into the concatenation i.e. the directory entry name being encoded by a bunch of NM entries. The process stops when the...

kernel: Information leak when handling NM entries containing NUL

A vulnerability was found in the Linux kernel. Payloads of NM entries are not supposed to contain NUL. When such entry is processed, only the part prior to the first NUL goes into the concatenation i.e. the directory entry name being encoded by a bunch of NM entries. The process stops when the...

SQLite Tempdir Selection Vulnerability

Vulnerability Details Affected Vendor: SQLite/Hwaci Affected Product: SQLite Affected Version: All versions prior to 3.13.0 Platform: UNIX, GNU/Linux CWE Classification: CWE-379: Creation of Temporary File in Directory with Incorrect Permissions Impact: Data Leakage Attack vector: Local 2...

FuseISO Stack Buffer Overflow Vulnerability

FuseISO is an open source FUSE module for mounting ISO filesystems such as .iso, .nrg, .bin, .mdf, and .img images, developed by software developer Adam Rimon. A stack buffer overflow vulnerability exists in the 'isofsrealreaddir' function in the isofs.c file in FuseISO 20070708 and earlier...

DEBIAN-CVE-2015-8837

Stack-based buffer overflow in the isofsrealreaddir function in isofs.c in FuseISO 20070708 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long pathname in an ISO file...

UBUNTU-CVE-2015-8837

Stack-based buffer overflow in the isofsrealreaddir function in isofs.c in FuseISO 20070708 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long pathname in an ISO file...

FreeBSD NFS server memory corruption

It's possible to call readdir on plain file...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 4472)

This kernel update fixes the following security problems : - It was possible for local user to become root by exploiting a bug in the IA32 system call emulation. This affects x8664 platforms with kernel 2.4.x and 2.6.x before 2.6.22.7 only. CVE-2007-4573 - An information disclosure vulnerability ...

kernel: proc: signedness issue in next_pidmap()

Multiple integer overflows in the nextpidmap function in kernel/pid.c in the Linux kernel before 2.6.38.4 allow local users to cause a denial of service system crash via a crafted 1 getdents or 2 readdir system call...