CVE-2019-20428

In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds read and panic due to the lack of validation for specific fields of packets sent by a client. The ldlrequestcancel function mishandles a large lockcount parameter...

CVE-2019-20428

creationtimestamp| type| source ---|---|--- 2020-01-27 08:37:46+00:00| seen| https://t.me/cveNotify/434...

CVE-2019-20428

CVE-2019-20428 affects Lustre prior to 2.12.3. The ptlrpc module can trigger an out-of-bounds read and panic due to insufficient validation of certain client packet fields, with the ldl_request_cancel function mishandling a large lock_count. Impact is a potential crash/denial of service as descri...