307 matches found
PT-2022-30785
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.311 Description A memory leak issue was discovered in the jffs2 file system. The issue is related to the jffs2 do mount fs function. This problem was introduced in version v2.6.15 and fixed in version...
PT-2022-30647
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.238 Description The issue is related to a use-after-free in jffs2 clear xattr subsystem. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior t...
PT-2022-30726
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.276 Description The issue is related to a use-after-free in jffs2 clear xattr subsystem. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior t...
PT-2022-30549
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.189 Description A memory leak issue was discovered in the jffs2 scan medium function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...
PT-2022-30408
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description A memory leak issue was discovered in the jffs2 file system. The issue is related to the jffs2 do mount fs function. This problem was introduced in version v2.6.15 and fixed in version...
PT-2022-30724
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.276 Description A memory leak issue was discovered in the jffs2 scan medium function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...
PT-2022-30645
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.238 Description A memory leak issue was discovered in the jffs2 scan medium function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...
PT-2025-7967
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue has been identified in the jffs2 file system. The problem occurs when mounting a jffs2 image with abnormal blocks, leading to an error in jffs2 scan eraseblock. Th...
PT-2021-11111
Name of the Vulnerable Software and Affected Versions: Mimosa B5, B5c, and C5x firmware versions through 2.8.0.2 Description: The issue concerns a stored XSS vulnerability in the set banner function of /var/www/core/controller/index.php, allowing an unauthenticated attacker to set the contents of...
Linux: Mounting of jffs2 filesystems
The jffs2 journaling flash filesystem 2 filesystem type is a log-structured filesystem used in flash memory devices. Removing support for unneeded filesystem types reduces the local attack surface of the system. If this filesystem type is not needed, disable it. SPDX-FileCopyrightText: 2019...
Yi Technology Home Camera 27US Firmware 7z CRC Collision Vulnerability
Summary An exploitable code execution vulnerability exists in the firmware update functionality of the Yi Home Camera 27US 1.8.7.0D. A specially crafted 7-Zip file can cause a CRC collision, resulting in a firmware update and code execution. An attacker can insert an SDcard to trigger this...
Actiontec T2200H Remote Reverse Root Shell
Device Details Vendor: Actiontec Telus Branded, but may work on others Model: T2200H but likely affecting other similar models of theirs Affected Firmware: T2200H-31.128L.03 Device Manual: http://static.telus.com/common/cms/files/internet/telust2200husermanual.pdf Reported: November 2015 Status:...
CVE-2007-4849
JFFS2, as used on One Laptop Per Child OLPC build 542 and possibly other Linux systems, when POSIX ACL support is enabled, does not properly store permissions during 1 inode creation or 2 ACL setting, which might allow local users to access restricted files or directories after a remount of a...
Ubuntu: Security Advisory (USN-574-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 6.10 / 7.04 / 7.10 : linux-source-2.6.17/20/22 vulnerabilities (USN-574-1)
The minix filesystem did not properly validate certain filesystem values. If a local attacker could trick the system into attempting to mount a corrupted minix filesystem, the kernel could be made to hang for long periods of time, resulting in a denial of service. This was only vulnerable in Ubun...
USN-574-1: Linux kernel vulnerabilities
The minix filesystem did not properly validate certain filesystem values. If a local attacker could trick the system into attempting to mount a corrupted minix filesystem, the kernel could be made to hang for long periods of time, resulting in a denial of service. This was only vulnerable in Ubun...
USN-558-1: Linux kernel vulnerabilities
The minix filesystem did not properly validate certain filesystem values. If a local attacker could trick the system into attempting to mount a corrupted minix filesystem, the kernel could be made to hang for long periods of time, resulting in a denial of service. CVE-2006-6058 Certain calculatio...
Ubuntu 6.10 / 7.04 / 7.10 : linux-source-2.6.17/20/22 vulnerabilities (USN-558-1)
The minix filesystem did not properly validate certain filesystem values. If a local attacker could trick the system into attempting to mount a corrupted minix filesystem, the kernel could be made to hang for long periods of time, resulting in a denial of service. CVE-2006-6058 Certain calculatio...
Debian DSA-1378-2 : linux-2.6 - several vulnerabilities
Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-3731 Evan Teran discovered a potential local...
