PT-2021-29205

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.194 Description A bug was found in the ext4 es cache extent function, where ext4 split extent at failed. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations For...

PT-2021-25211

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.194 Description A bug was found in the ext4 es cache extent function, where ext4 split extent at failed. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-29278

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.10 Description A bug was found in the ext4 es cache extent function, where ext4 split extent at failed. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

UVI-2021-1000731 ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed

ext4: fix bug on in ext4escacheextent as ext4splitextentat failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.236 by commit...

UVI-2021-1000723 ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed

ext4: fix bug on in ext4escacheextent as ext4splitextentat failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.272 by commit...

PT-2021-25202

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.236 Description A bug was found in the ext4 es cache extent function, where ext4 split extent at failed. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations For...

PT-2021-29188

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.272 Description A bug was found in the ext4 es cache extent function, where ext4 split extent at failed. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations For...

PT-2021-29196

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.236 Description A bug was found in the ext4 es cache extent function, where ext4 split extent at failed. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations For...

PT-2021-29180

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.272 Description A bug was found in the ext4 es cache extent function, where ext4 split extent at failed. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-25194

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.272 Description A bug was found in the ext4 es cache extent function, where ext4 split extent at failed. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations For...

njs:njs_process_script_fuzzer: Crash in njs_string_new

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=4691222710059008 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzerasannjs Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6180bebecbce Crash State:...

njs:njs_process_script_fuzzer: Use-of-uninitialized-value in njs_string_prototype_split

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=6607010525872128 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzermsannjs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

How to split entire organization backup job on per-service basis

Challenge It might be required to create a backup job that would only process a particular Microsoft Office 365 service. This might help to improve backup performance of each service as well as to isolate performance issue to a particular service. Solution This example demonstrates creating a...

GHSA-H4PC-GX2W-F2XV Heap OOB read in TFLite

Impact A specially crafted TFLite model could trigger an OOB read on heap in the TFLite implementation of SplitV: cc const int inputsize = SizeOfDimensioninput, axisvalue; If axisvalue is not a value between 0 and NumDimensionsinput, then the SizeOfDimension function will access data outside the...

GHSA-97WF-P777-86JQ Division by zero in TFLite's implementation of Split

Impact The implementation of the Split TFLite operator is vulnerable to a division by zero error: cc TFLITEENSUREMSGcontext, inputsize % numsplits == 0, "Not an even split"; const int slicesize = inputsize / numsplits; An attacker can craft a model such that numsplits would be 0. Patches We have...

Division by zero in TFLite's implementation of Split

Impact The implementation of the Split TFLite operator is vulnerable to a division by zero error: cc TFLITEENSUREMSGcontext, inputsize % numsplits == 0, "Not an even split"; const int slicesize = inputsize / numsplits; An attacker can craft a model such that numsplits would be 0. Patches We have...

GHSA-XVJM-FVXX-Q3HV CHECK-fail due to integer overflow

Impact An attacker can trigger a denial of service via a CHECK-fail in caused by an integer overflow in constructing a new tensor shape: python import tensorflow as tf inputlayer = 260-1 sparsedata = tf.rawops.SparseSplit splitdim=1, indices=0, 0, 0, 1, 0, 2, 4, 3, 5, 0, 5, 1, values=1.0, 1.0, 1....

GHSA-MQH2-9WRP-VX84 Heap buffer overflow in `SparseSplit`

Impact An attacker can cause a heap buffer overflow in tf.rawops.SparseSplit: python import tensorflow as tf shapedims = tf.constant0, dtype=tf.int64 indices = tf.ones1, 1, dtype=tf.int64 values = tf.ones1, dtype=tf.int64 shape = tf.ones1, dtype=tf.int64 tf.rawops.SparseSplit splitdim=shapedims,...

grub2: Stack buffer overflow in grub_parser_split_cmdline()

A flaw was found in grub2. Variable names present are expanded in the supplied command line into their corresponding variable contents, using a 1kB stack buffer for temporary storage, without sufficient bounds checking. If the function is called with a command line that references a variable with...

Telegram buffer error vulnerability

Telegram is an instant messaging mobile application. A stack overflow vulnerability exists in the custom derived graysplitcubic function of the Rlottie library for Telegram Android version prior to 7.1.0 2090, iOS version prior to 7.1, and macOS version prior to 7.1. An attacker can exploit this...