CVE-2021-3506

An out-of-bounds OOB memory access flaw was found in fs/f2fs/node.c in the f2fs module in the Linux kernel in versions before 5.12.0-rc4. A bounds check failure allows a local attacker to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The...

CVE-2021-3506

CVE-2021-3506 : An out-of-bounds memory access in fs/f2fs/node.c of the Linux kernel (f2fs module) allows a local attacker to read/write out-of-bounds memory, leading to a system crash or leakage of kernel information. Affected are kernel versions before 5.12.0-rc4. The description notes the high...

CVE-2021-3506

An out-of-bounds OOB memory access flaw was found in fs/f2fs/node.c in the f2fs module in the Linux kernel. A bounds check failure allows a local attacker to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this...

Linux kernel 缓冲区错误漏洞

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. An out-of-bounds memory access vulnerability exists in fs/f2fs/node.c in the f2fs module in versions of Linux kernel...

PT-2021-4238 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.12.0-rc4 Description: An out-of-bounds memory access flaw was found in the f2fs module of the Linux kernel. This flaw is due to a bounds check failure, allowing a local attacker to access out-of-bounds memory...

PT-2024-11111 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a panic that occurs during the f2fs resize fs function in the Linux kernel. This happens when the filesystem is resized to a smaller size, and there is not enou...

f2fs-tools: Multiple vulnerabilities

Background Tools for Flash-Friendly File System F2FS. Description Multiple vulnerabilities have been discovered in f2fs-tools. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known workaround a...

GLSA-202101-26 : f2fs-tools: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202101-26 f2fs-tools: Multiple vulnerabilities Multiple vulnerabilities have been discovered in f2fs-tools. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for...

Arbitrary Code Execution

f2fs-tools is vulnerable to arbitrary code execution. The vulnerability exists through the file system checking functionality where a specially crafted f2fs file can cause a logic flaw and out-of-bounds heap operations...

Information Disclosure

f2fs-tools is vulnerable to information disclosure. An attacker can inject a specially crafted filesystem in the getdnodeofdata functionality resulting in an information disclosure...

Arbitrary Code Execution

f2fs-tools is vulnerable to arbitrary code execution. An attacker is able to overwrite arbitrary files which would result in arbitrary code execution using a malicious file...

Information Disclosure

f2fs-tools is vulnerable to information disclosure. The vulnerability exists through the initnodemanager functionality where a crafted filesystem can be used to disclose information...

Information Disclosure

f2fs-tools is vulnerable to information disclosure. An attacker can inject a specially crafted filesystem in the devread functionality resulting in an information disclosure...

Arbitrary Code Execution

f2fs-tools is vulnerable to arbitrary code execution. A heap-based buffer overflow in the fsckchkorphannode functionality allows an attacker to execute arbitrary code via a malicious file...

MGASA-2020-0436 Updated f2fs-tools packages fix security vulnerability

An exploitable code execution vulnerability exists in the file system checking functionality of fsck.f2fs 1.12.0. A specially crafted f2fs file can cause a logic flaw and out-of-bounds heap operations, resulting in code execution. An attacker can provide a malicious file to trigger this...

Updated f2fs-tools packages fix security vulnerability

An exploitable code execution vulnerability exists in the file system checking functionality of fsck.f2fs 1.12.0. A specially crafted f2fs file can cause a logic flaw and out-of-bounds heap operations, resulting in code execution. An attacker can provide a malicious file to trigger this...

Debian DLA-2420-2 : linux regression update

This update corrects a regression in some Xen virtual machine environments. For reference the original advisory text follows. Several vulnerabilities have been discovered in the Linux kernel that may lead to the execution of arbitrary code, privilege escalation, denial of service or information...

CVE-2020-6104

An exploitable information disclosure vulnerability exists in the getdnodeofdata functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause information disclosure resulting in a information disclosure. An attacker can provide a malicious file to trigger this...

CVE-2020-6107

An exploitable information disclosure vulnerability exists in the devread functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause an uninitialized read resulting in an information disclosure. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2020-6108

An exploitable code execution vulnerability exists in the fsckchkorphannode functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause a heap buffer overflow resulting in a code execution. An attacker can provide a malicious file to trigger this vulnerability...