CVE-2023-0592: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability affects jefferson's JFFS2 filesystem extractor. By crafting malicious JFFS2 files, attackers could force jefferson to write outside of the extraction directory.This issue affects jefferson: before 0.4.1...

GHSA-7JRW-P8JC-V6QW sviehb/jefferson vulnerable to path traversal

A vulnerability has been found in the sviehb/jefferson JFFS2 filesystem extraction tool. This vulnerability affects unknown code of the file src/scripts/jefferson. The manipulation leads to path traversal. The attack can be initiated remotely. Upgrading to version 0.4 is able to address this issu...

sviehb/jefferson vulnerable to path traversal

A vulnerability has been found in the sviehb/jefferson JFFS2 filesystem extraction tool. This vulnerability affects unknown code of the file src/scripts/jefferson. The manipulation leads to path traversal. The attack can be initiated remotely. Upgrading to version 0.4 is able to address this issu...

GSD-2022-1004050 jffs2: fix memory leak in jffs2_do_fill_super

jffs2: fix memory leak in jffs2dofillsuper This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.318 by commit...

GSD-2022-1003968 jffs2: fix memory leak in jffs2_do_fill_super

jffs2: fix memory leak in jffs2dofillsuper This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...

GSD-2022-1003858 jffs2: fix memory leak in jffs2_do_fill_super

jffs2: fix memory leak in jffs2dofillsuper This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.247 by commit...

GSD-2022-1003717 jffs2: fix memory leak in jffs2_do_fill_super

jffs2: fix memory leak in jffs2dofillsuper This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...

GSD-2022-1003529 jffs2: fix memory leak in jffs2_do_fill_super

jffs2: fix memory leak in jffs2dofillsuper This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.122 by commit...

GSD-2022-1003278 jffs2: fix memory leak in jffs2_do_fill_super

jffs2: fix memory leak in jffs2dofillsuper This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.47 by commit...

GSD-2022-1002974 jffs2: fix memory leak in jffs2_do_fill_super

jffs2: fix memory leak in jffs2dofillsuper This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.15 by commit...

GSD-2022-1002634 jffs2: fix memory leak in jffs2_do_fill_super

jffs2: fix memory leak in jffs2dofillsuper This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

PT-2022-31541

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.15 through 5.15.46 Description A memory leak issue was discovered in the jffs2 do fill super function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 2.6....

PT-2022-32231

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.283 Description A memory leak issue was discovered in the jffs2 file system. The issue is related to the jffs2 do fill super function. This problem was introduced in version v2.6.15 and is fixed in version...

PT-2022-32313

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.318 Description A memory leak issue was discovered in the jffs2 do fill super function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-31980

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description A memory leak issue was discovered in the jffs2 file system. The issue is related to the jffs2 do fill super function. This problem was introduced in version v2.6.15 and is fixed in version...

PT-2022-32121

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description A memory leak issue was discovered in the jffs2 do fill super function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-31792

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.122 Description A memory leak issue was discovered in the jffs2 do fill super function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-31237

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.15 Description A memory leak issue was discovered in the jffs2 do fill super function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-30897

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.4 Description A memory leak issue was discovered in the jffs2 do fill super function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

GSD-2022-1002514 jffs2: fix use-after-free in jffs2_clear_xattr_subsystem

jffs2: fix use-after-free in jffs2clearxattrsubsystem This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.311 by commit...