GSD-2022-1006884 ext2: Add sanity checks for group and filesystem size

ext2: Add sanity checks for group and filesystem size This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

PT-2022-35379 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.15.61 through v5.15.74 Description: A potential security issue has been identified in the ext4 filesystem. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version...

PT-2022-35416 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.74 Description: A use-after-free bug was discovered in the struct nilfs root of the nilfs2 file system. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-35185 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.2 Description: A use-after-free bug was discovered in the struct nilfs root of the nilfs2 file system. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-35861 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.296 Description: The issue is related to the ext4 file system, where a crash can occur when inline data creation follows a DIO write. The actual impact and attack plausibility have not yet been proven...

PT-2022-35868 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.296 Description: The issue is related to the nilfs2 file system in the Linux Kernel, where checkpoint acquisition failure is not properly handled, potentially leading to security vulnerabilities. The actua...

PT-2022-35130 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: A potential memory leak was identified in the ext4 fc record regions function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-35382 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.75 Description: The issue concerns a lack of sanity check on destination blkaddr during recovery in the f2fs component. This could potentially lead to security vulnerabilities, although the actual impact a...

PT-2022-35139 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue concerns the ext2 filesystem in the Linux Kernel, where sanity checks for group and filesystem size have been added. The actual impact and attack plausibility of this issue have not...

PT-2022-35065 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue concerns stricter integer overflow checks in the f fs gadget of the Linux Kernel. It was introduced in version v3.14 and fixed in version v6.0.3. The actual impact and attack...

PT-2022-35184 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.2 Description: The issue concerns the nilfs2 file system in the Linux Kernel, where checkpoint acquisition failure is not properly handled, potentially leading to security vulnerabilities. The actual impact...

PT-2022-35703 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.220 Description: A use-after-free bug was discovered in the struct nilfs root of the nilfs2 file system. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-35257 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.75 Description: The issue is related to the use of kvmalloc for the group descriptor array in ext2. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-35568 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.150 Description: The issue concerns a fix for a sanity check on destination blkaddr during recovery in the f2fs component. The actual impact and attack plausibility have not yet been proven. Recommendation...

PT-2022-35134 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to a potential dir corruption in ext4 when the ext4 dx add entry function fails. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2022-6379 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel version 6.0.8 Description: The issue is related to a use-after-free vulnerability in the ntfs trim fs function of the fs/ntfs3/bitmap.c component in the Linux kernel. This vulnerability may allow an attacker to impact the...

CVE-2022-40981

The CVE-2022-40981 issue affects ETIC Telecom Remote Access Server (RAS) prior to 4.7.0 (versions 4.5.0 and earlier). Technical details from connected sources describe three vulnerabilities in RAS: CVE-2022-3703 (insufficient verification of data authenticity) allowing rogue firmware backdoors wi...

CVE-2022-41874

Tauri is a framework for building binaries for all major desktop platforms. In versions prior to 1.0.7 and 1.1.2, Tauri is vulnerable to an Incorrectly-Resolved Name. Due to incorrect escaping of special characters in paths selected via the file dialog and drag and drop functionality, it is...

Path traversal

dotCMS before 22.06 allows remote attackers to bypass intended access control and obtain sensitive information by using a semicolon in a URL to introduce a matrix parameter. This is also fixed in 5.3.8.12, 21.06.9, and 22.03.2 for LTS users. Some Java application frameworks, including those used ...

CVE-2022-41874 Tauri Filesystem Scope can be Partially Bypassed

Tauri is a framework for building binaries for all major desktop platforms. In versions prior to 1.0.7 and 1.1.2, Tauri is vulnerable to an Incorrectly-Resolved Name. Due to incorrect escaping of special characters in paths selected via the file dialog and drag and drop functionality, it is...