Lustre ptlrpc module buffer overflow vulnerability (CNVD-2020-07306)

Lustre is a parallel distributed file system typically used in large computer clusters and supercomputers, of which Lustre ptlrpc is a module. A buffer overflow vulnerability exists in the Lustre ptlrpc module. The vulnerability stems from a networked system or product performing operations in...

Lustre ptlrpc module buffer overflow vulnerability

Lustre is a parallel distributed file system typically used in large computer clusters and supercomputers, of which Lustre ptlrpc is a module. A buffer overflow vulnerability exists in the Lustre ptlrpc module. The vulnerability stems from a networked system or product performing operations in...

Lustre ptlrpc module buffer overflow vulnerability (CNVD-2020-07304)

Lustre is a parallel distributed file system typically used in large computer clusters and supercomputers, of which Lustre ptlrpc is a module. A buffer overflow vulnerability exists in the Lustre ptlrpc module. The vulnerability stems from a networked system or product performing operations in...

Lustre ptlrpc module buffer overflow vulnerability (CNVD-2020-07300)

Lustre is a parallel distributed file system typically used in large computer clusters and supercomputers, of which Lustre ptlrpc is a module. A security vulnerability exists in the Lustre ptlrpc module. The vulnerability stems from a networked system or product performing operations on memory...

Lustre ptlrpc module buffer overflow vulnerability (CNVD-2020-07305)

Lustre is a parallel distributed file system typically used in large computer clusters and supercomputers, of which Lustre ptlrpc is a module. A buffer overflow vulnerability exists in the Lustre ptlrpc module. The vulnerability stems from a networked system or product performing operations in...

Lustre ptlrpc module buffer overflow vulnerability (CNVD-2020-07303)

Lustre is a parallel distributed file system typically used in large computer clusters and supercomputers, of which Lustre ptlrpc is a module. A buffer overflow vulnerability exists in the Lustre ptlrpc module. The vulnerability stems from a networked system or product performing operations in...

Lustre mdt module input validation error vulnerability

Lustre is a parallel distributed file system typically used in large computer clusters and supercomputers, of which Lustre mdt is a module. An input validation error vulnerability exists in the Lustre mdt module. The vulnerability stems from a network system or product that does not properly...

Lustre mdt module buffer overflow vulnerability

Lustre is a parallel distributed file system typically used in large computer clusters and supercomputers, of which Lustre mdt is a module. A buffer overflow vulnerability exists in the Lustre mdt module. The vulnerability stems from a networked system or product performing operations in memory...

CVE-2019-20428

In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds read and panic due to the lack of validation for specific fields of packets sent by a client. The ldlrequestcancel function mishandles a large lockcount parameter...

CVE-2019-20429

In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds read and panic via a modified lmbufcount field due to the lack of validation for specific fields of packets sent by a client. This is caused by interaction between sptlrpcsvcunwraprequest and lustremsghdrsizev2...

CVE-2019-20430

In the Lustre file system before 2.12.3, the mdt module has an LBUG panic via a large MDT Body eadatasize field due to the lack of validation for specific fields of packets sent by a client...

CVE-2019-20430

In the Lustre file system before 2.12.3, the mdt module has an LBUG panic via a large MDT Body eadatasize field due to the lack of validation for specific fields of packets sent by a client...

CVE-2019-20428

In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds read and panic due to the lack of validation for specific fields of packets sent by a client. The ldlrequestcancel function mishandles a large lockcount parameter...

CVE-2019-20431

In the Lustre file system before 2.12.3, the ptlrpc module has an osdmapremotetolocal out-of-bounds access and panic due to the lack of validation for specific fields of packets sent by a client. osdbufsget in the osdldiskfs module does not validate a certain length value...

CVE-2019-20427

In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic, and possibly remote code execution, due to the lack of validation for specific fields of packets sent by a client. Interaction between reqcapsulegetsize and tgtbrwwrite leads to a tgtshortio2pages integer...

CVE-2019-20431

In the Lustre file system before 2.12.3, the ptlrpc module has an osdmapremotetolocal out-of-bounds access and panic due to the lack of validation for specific fields of packets sent by a client. osdbufsget in the osdldiskfs module does not validate a certain length value...

CVE-2019-20432

In the Lustre file system before 2.12.3, the mdt module has an out-of-bounds access and panic due to the lack of validation for specific fields of packets sent by a client. mdtfilesecctxunpack does not validate the value of namesize derived from reqcapsulegetsize...

CVE-2019-20429

In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds read and panic via a modified lmbufcount field due to the lack of validation for specific fields of packets sent by a client. This is caused by interaction between sptlrpcsvcunwraprequest and lustremsghdrsizev2...

CVE-2019-20432

In the Lustre file system before 2.12.3, the mdt module has an out-of-bounds access and panic due to the lack of validation for specific fields of packets sent by a client. mdtfilesecctxunpack does not validate the value of namesize derived from reqcapsulegetsize...

CVE-2019-20425

In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds access and panic due to the lack of validation for specific fields of packets sent by a client. In the function lustremsgstring, there is no validation of a certain length value derived from lustremsgbuflenv2...