57 matches found
f2fs: fix to do sanity check on node blkaddr in truncate_node()
...
SUSE CVE-2024-56692
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on node blkaddr in truncatenode syzbot reports a f2fs bug as below: ------------ cut here ------------ kernel BUG at fs/f2fs/segment.c:2534! RIP: 0010:f2fsinvalidateblocks+0x35f/0x370...
CVE-2024-56692 f2fs: fix to do sanity check on node blkaddr in truncate_node()
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on node blkaddr in truncatenode syzbot reports a f2fs bug as below: ------------ cut here ------------ kernel BUG at fs/f2fs/segment.c:2534! RIP: 0010:f2fsinvalidateblocks+0x35f/0x370...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from insufficient integrity checking of node block addresses in the truncatenode function in the f2fs module...
CVE-2024-54129 Improper Initialization of `imc` Scheme Leading to `SIGABRT` in ION-DTN BPv7
The NASA’s Interplanetary Overlay Network ION is an implementation of Delay/Disruption Tolerant Networking DTN. A vulnerability exists in the version ION-DTN BPv7 implementation version 4.1.3 when receiving a bundle with an improper reference to the imc scheme with valid Service-Specific Part SSP...
CVE-2024-54129 Improper Initialization of `imc` Scheme Leading to `SIGABRT` in ION-DTN BPv7
The NASA’s Interplanetary Overlay Network ION is an implementation of Delay/Disruption Tolerant Networking DTN. A vulnerability exists in the version ION-DTN BPv7 implementation version 4.1.3 when receiving a bundle with an improper reference to the imc scheme with valid Service-Specific Part SSP...
CVE-2024-54129
The CVE-2024-54129 entry concerns NASA’s Interplanetary Overlay Network (ION) - DTN BPv7, version 4.1.3. The flaw occurs when receiving a bundle with an improper reference to the imc scheme that contains a valid Service-Specific Part (SSP) in the Previous Node Block, which can cause ION to become...
CVE-2024-54129
The NASA’s Interplanetary Overlay Network ION is an implementation of Delay/Disruption Tolerant Networking DTN. A vulnerability exists in the version ION-DTN BPv7 implementation version 4.1.3 when receiving a bundle with an improper reference to the imc scheme with valid Service-Specific Part SSP...
PT-2024-36059
Name of the Vulnerable Software and Affected Versions: ION-DTN BPv7 version 4.1.3 Description: A vulnerability exists in the ION-DTN BPv7 implementation when receiving a bundle with an improper reference to the imc scheme with valid Service-Specific Part SSP in their Previous Node Block. This can...
CVE-2024-54129: Improper Initialization
The NASA’s Interplanetary Overlay Network ION is an implementation of Delay/Disruption Tolerant Networking DTN. A vulnerability exists in the version ION-DTN BPv7 implementation version 4.1.3 when receiving a bundle with an improper reference to the imc scheme with valid Service-Specific Part SSP...
GSD-2021-1002548 f2fs: set SBI_NEED_FSCK flag when inconsistent node block found
f2fs: set SBINEEDFSCK flag when inconsistent node block found This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.6 by commit...
GSD-2021-1002439 f2fs: set SBI_NEED_FSCK flag when inconsistent node block found
f2fs: set SBINEEDFSCK flag when inconsistent node block found This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.163 by commit...
PT-2021-27016
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.6 Description A potential issue has been identified in the f2fs component, where an inconsistent node block is found, and the SBI NEED FSCK flag is set. The actual impact and attack plausibility of this iss...
PT-2021-26907
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.163 Description A potential issue has been identified in the f2fs component of the Linux Kernel, where an inconsistent node block is found, but the actual impact and attack plausibility have not yet been...
PT-2021-26948
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.83 Description A potential issue exists where an inconsistent node block is found, and the SBI NEED FSCK flag is set. The actual impact and attack plausibility have not yet been proven. Recommendations For...
PT-2018-9206
Name of the Vulnerable Software and Affected Versions: Jenkins Pipeline: Nodes and Processes plugin versions prior to 2.17 Description: The issue is related to incorrect permissions checks in the Pipeline: Nodes and Processes plugin, which allowed the execution of Pipeline node blocks on agents...
SA-CONTRIB-2010-004 - Node block - Cross site scripting
This module allows you to specify content types as being a block. This allows the content managers of the site to edit the block text and title without having to access the block administration page. Users only need edit access to that node in order to edit it. Users with administer block access...