GSD-2023-1001024 hfs: fix OOB Read in __hfs_brec_find

hfs: fix OOB Read in hfsbrecfind This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit 367296925c7625c3969d2a78d7a3e1dee161beb5. Fo...

GSD-2023-1000868 hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling

hfs/hfsplus: avoid WARNON for sanity check, use proper error handling This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000598 hfs: fix OOB Read in __hfs_brec_find

hfs: fix OOB Read in hfsbrecfind This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit e9e692917c6e10a7066c7a6d092dcdc3d4e329f3. For...

PT-2023-34101

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description The issue is related to an out-of-bounds read in the hfs brec find function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

PT-2023-34266

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description The issue concerns an out-of-bounds write in hfs asc2mac. It was introduced in version v2.6.14 and fixed in version v5.15.86. The actual impact and attack plausibility have not yet been prove...

PT-2023-34313

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue concerns the hfs/hfsplus component, where a sanity check uses WARN ON instead of proper error handling. The actual impact and attack plausibility have not yet been proven...

PT-2023-34567

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.14 through 5.10.162 Description The issue concerns an out-of-bounds write in hfs asc2mac. It was introduced in version v2.6.14 and fixed in version v5.10.163. The actual impact and attack plausibility have not yet bee...

PT-2023-34718

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.14 through 4.9.336 Description The issue is related to an out-of-bounds write in hfs asc2mac. It was introduced in version v2.6.14 and fixed in version v4.9.337. The actual impact and attack plausibility have not yet...

PT-2023-33890

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description The issue concerns an out-of-bounds write in hfs asc2mac. It was introduced in version v2.6.14 and fixed in version v6.0.16. The actual impact and attack plausibility have not yet been proven...

PT-2023-34425 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.163 Description: The issue concerns an out-of-bounds read in the hfs brec find function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior...

PT-2023-33472

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.19 Description The issue concerns the hfs/hfsplus component, where a sanity check uses WARN ON instead of proper error handling. The actual impact and attack plausibility have not yet been proven...

PT-2023-33945

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.87 Description The issue concerns the hfs/hfsplus component, where a sanity check uses WARN ON instead of proper error handling. The actual impact and attack plausibility have not yet been proven...

PT-2023-34643

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.337 Description The issue concerns an out-of-bounds read in the hfs brec find function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2025-53113

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the hfs module, specifically in the hfs asc2mac function. A Syzbot report identified an out-of-bounds write issue. This occurs when the input leng...

PT-2025-43091

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc6-syzkaller-00308-g644e9524388a Description The Linux kernel contains a flaw within the HFS file system implementation. Specifically, a potential out-of-bounds read issue exists in the hfs brec find...

Debian DLA-3054-1 : sleuthkit - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3054 advisory. - In The Sleuth Kit TSK 4.4.2, opening a crafted ISO 9660 image triggers an out-of-bounds read in iso9660procdir in tsk/fs/iso9660dent.c in libtskfs.a, as...

CVE-2018-19497

In The Sleuth Kit TSK through 4.6.4, hfscattraverse in tsk/fs/hfs.c does not properly determine when a key length is too large, which allows attackers to cause a denial of service SEGV on unknown address with READ memory access in a tskgetu16 call in hfsdiropenmetacb in tsk/fs/hfsdent.c...

EulerOS Virtualization 3.0.2.6 : git (EulerOS-SA-2021-2887)

According to the versions of the git packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Git is an open-source distributed revision control system. In affected versions of Git a specially crafted repository that contains...

PT-2021-27997

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read, which was identified through an OSS-Fuzz report. The crash state involves several functions, including...

sleuthkit:sleuthkit_fls_hfs_fuzzer: Heap-buffer-overflow in hfs_dir_open_meta_cb

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=4872546799976448 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflshfsfuzzer Job Type: libfuzzerasansleuthkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...