Lucene search
+L

518 matches found

OSV
OSV
added 2018/04/24 12:0 a.m.3 views

UBUNTU-CVE-2018-10323

The xfsbmapextentstobtree function in fs/xfs/libxfs/xfsbmap.c in the Linux kernel through 4.16.3 allows local users to cause a denial of service xfsbmapiwrite NULL pointer dereference via a crafted xfs image...

5.5CVSS6.7AI score0.00574EPSS
SaveExploits1References9
OSV
OSV
added 2018/03/12 3:29 a.m.5 views

DEBIAN-CVE-2017-18224

In the Linux kernel before 4.15, fs/ocfs2/aops.c omits use of a semaphore and consequently has a race condition for access to the extent tree during read operations in DIRECT mode, which allows local users to cause a denial of service BUG by modifying a certain ecpos field...

4.7CVSS5.8AI score0.00275EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2016/11/03 8:8 a.m.7 views

kernel: Information leak when truncating of compressed/inlined extents on BTRFS

An information-leak vulnerability was found in the kernel when it truncated a file to a smaller size which consisted of an inline extent that was compressed. The data between the new file size and the old file size was not discarded and the number of bytes used by the inode were not correctly...

4CVSS7AI score0.00501EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2016/11/03 8:6 a.m.9 views

kernel: Information leak when truncating of compressed/inlined extents on BTRFS

An information-leak vulnerability was found in the kernel when it truncated a file to a smaller size which consisted of an inline extent that was compressed. The data between the new file size and the old file size was not discarded and the number of bytes used by the inode were not correctly...

4CVSS7AI score0.00501EPSS
SaveExploits0References4
OSV
OSV
added 2016/08/05 1:59 a.m.3 views

CVE-2016-2839

Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux make cairo cairosurfacegetextents calls that do not properly interact with libav header allocation in FFmpeg 0.10, which allows remote attackers to cause a denial of service application crash via a crafted video...

6.5CVSS7.4AI score0.0179EPSS
SaveExploits0References8
OSV
OSV
added 2016/08/03 12:0 a.m.4 views

UBUNTU-CVE-2016-2839

Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux make cairo cairosurfacegetextents calls that do not properly interact with libav header allocation in FFmpeg 0.10, which allows remote attackers to cause a denial of service application crash via a crafted video...

6.5CVSS7AI score0.0179EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2016/08/02 12:0 a.m.78 views

Debian DSA-3426-1 : Linux Security Update

The remote Debian host is running a version of the Linux kernel prior to 3.2.73-2+deb7u1 on Debian 7 or is running a version of the Linux kernel prior to 3.16.7-ckt20-1+deb8u1 on Debian 8. It is, therefore, affected by the following vulnerabilities : - A use-after-free error exists in the...

10CVSS6.7AI score0.02501EPSS
SaveExploits3References15
NVD
NVD
added 2015/12/28 11:59 a.m.25 views

CVE-2015-8374

fs/btrfs/inode.c in the Linux kernel before 4.3.3 mishandles compressed inline extents, which allows local users to obtain sensitive pre-truncation information from a file via a clone action...

4CVSS4.6AI score0.00501EPSS
SaveExploits0References21
OSV
OSV
added 2015/12/28 11:59 a.m.3 views

DEBIAN-CVE-2015-8374

fs/btrfs/inode.c in the Linux kernel before 4.3.3 mishandles compressed inline extents, which allows local users to obtain sensitive pre-truncation information from a file via a clone action...

4CVSS5.2AI score0.00501EPSS
SaveExploits0References1
CVE
CVE
added 2015/12/28 11:0 a.m.153 views

CVE-2015-8374

CVE-2015-8374 affects the Linux kernel prior to 4.3.3. The vulnerability is due to the filesystem driver fs/btrfs/inode.c mishandling compressed inline extents, allowing local users to obtain sensitive pre-truncation data from a file via a clone operation. Affected: Linux kernel up to 4.3.2 (4.3....

4CVSS4.7AI score0.00501EPSS
SaveExploits0References21Affected Software1
Cvelist
Cvelist
added 2015/12/28 11:0 a.m.30 views

CVE-2015-8374

fs/btrfs/inode.c in the Linux kernel before 4.3.3 mishandles compressed inline extents, which allows local users to obtain sensitive pre-truncation information from a file via a clone action...

4.7AI score0.00501EPSS
SaveExploits0References21
UbuntuCve
UbuntuCve
added 2015/12/28 12:0 a.m.31 views

CVE-2015-8374

fs/btrfs/inode.c in the Linux kernel before 4.3.3 mishandles compressed inline extents, which allows local users to obtain sensitive pre-truncation information from a file via a clone action...

4CVSS6.7AI score0.00501EPSS
SaveExploits0References12
OSV
OSV
added 2015/12/28 12:0 a.m.4 views

UBUNTU-CVE-2015-8374

fs/btrfs/inode.c in the Linux kernel before 4.3.3 mishandles compressed inline extents, which allows local users to obtain sensitive pre-truncation information from a file via a clone action...

4CVSS6.7AI score0.00501EPSS
SaveExploits0References13
Veeam
Veeam
added 2015/12/03 12:0 a.m.244 views

VM does not meet the requirements for storage snapshot based jobs

Challenge A task utilizing storage snapshot integration fails with any of the following errors: VM does not meet requirements for storage snapshot based jobs: its virtual disks are not located on supported storage VM does not meet requirements for storage snapshot based jobs: its files are locate...

6.6AI score
SaveExploits0Affected Software1
CNVD
CNVD
added 2015/06/24 12:0 a.m.4 views

Linux Kernel 'fs/ext4/extents.c' Local Denial of Service Vulnerability

The Linux kernel is the kernel used by the open source operating system Linux. A security vulnerability exists in the Linux kernel's EXT4 file system when using the fallocate zero range function to handle page size block size. A local attacker can exploit this vulnerability to cause a denial of...

4.9CVSS6.3AI score0.00457EPSS
SaveExploits0References1
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.19 views

Linux Kernel 2.6.x - Ext4 'move extents' ioctl Local Privilege Escalation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/37277/info Linux kernel is prone to a local privilege-escalation vulnerability because the software fails to verify access permissions. Exploits may allow attackers to execute arbitrary code with kernel-level privileges a...

7.1AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2013/12/05 4:58 p.m.8 views

kernel: ext4: AIO vs fallocate stale data exposure

Race condition in fs/ext4/extents.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from a deleted file by reading an extent that was not properly marked as uninitialized...

1.9CVSS5.8AI score0.00285EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2013/02/20 4:32 p.m.5 views

kernel: ext4: AIO vs fallocate stale data exposure

Race condition in fs/ext4/extents.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from a deleted file by reading an extent that was not properly marked as uninitialized...

1.9CVSS5.8AI score0.00285EPSS
SaveExploits0References4
OSV
OSV
added 2012/12/21 11:47 a.m.4 views

DEBIAN-CVE-2012-4508

Race condition in fs/ext4/extents.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from a deleted file by reading an extent that was not properly marked as uninitialized...

1.9CVSS5.9AI score0.00285EPSS
SaveExploits0References1
Prion
Prion
added 2012/12/21 11:47 a.m.26 views

Race condition

Race condition in fs/ext4/extents.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from a deleted file by reading an extent that was not properly marked as uninitialized...

1.9CVSS6AI score0.00285EPSS
SaveExploits0References14Affected Software1
Rows per page
Query Builder