38275 matches found
CVE-2026-71224
A stack overflow vulnerability was found in gfs2-utils. The metadata walk code in metawalk.c uses alloca with an untrusted inode height value from on-disk metadata without bounds validation, causing stack exhaustion and a denial of service when processing crafted GFS2 filesystem images. Mitigatio...
CVE-2026-71221
A stack out-of-bounds write vulnerability was found in gfs2-utils. In savemeta, the height value from on-disk inode metadata is used as a loop bound without bounds checking, causing a stack buffer overflow that may lead to arbitrary code execution when processing crafted GFS2 filesystem images...
CVE-2026-71221
gfs2-utils is affected by a stack out-of-bounds write in the savemeta function, where the height value from on-disk inode metadata is used as a loop bound without bounds checking. This can cause a stack buffer overflow leading to arbitrary code execution when processing crafted GFS2 filesystem im...
CVE-2026-71219 Gfs2-utils: gfs2-utils: stack overflow via alloca(1<<di_depth) in hash table traversal
A stack overflow vulnerability was found in gfs2-utils. The hash table traversal code in metawalk.c uses alloca with an exponentially-derived size from the untrusted on-disk didepth field without bounds validation. A crafted GFS2 filesystem image with a large didepth value causes stack exhaustion...
EUVD-2026-70447
A stack overflow vulnerability was found in gfs2-utils. The hash table traversal code in metawalk.c uses alloca with an exponentially-derived size from the untrusted on-disk didepth field without bounds validation. A crafted GFS2 filesystem image with a large didepth value causes stack exhaustion...
CVE-2026-71219
gfs2-utils contains a stack overflow in the hash table traversal code of metawalk.c . The function alloca() is called with an exponentially derived size (1 <
CVE-2026-71219 Gfs2-utils: gfs2-utils: stack overflow via alloca(1<<di_depth) in hash table traversal
A stack overflow vulnerability was found in gfs2-utils. The hash table traversal code in metawalk.c uses alloca with an exponentially-derived size from the untrusted on-disk didepth field without bounds validation. A crafted GFS2 filesystem image with a large didepth value causes stack exhaustion...
CVE-2026-71219
A stack overflow vulnerability was found in gfs2-utils. The hash table traversal code in metawalk.c uses alloca with an exponentially-derived size from the untrusted on-disk didepth field without bounds validation. A crafted GFS2 filesystem image with a large didepth value causes stack exhaustion...
CVE-2026-71219
A stack overflow vulnerability was found in gfs2-utils. The hash table traversal code in metawalk.c uses alloca with an exponentially-derived size from the untrusted on-disk didepth field without bounds validation. A crafted GFS2 filesystem image with a large didepth value causes stack exhaustion...
erlang: Erlang OTP: Denial of Service via crafted SCTP ERROR chunk
A flaw was found in Erlang OTP Open Telecom Platform erts, specifically within the inetdrv component. An unauthenticated remote attacker can exploit a stack-based buffer overflow vulnerability by sending a specially crafted Stream Control Transmission Protocol SCTP ERROR chunk. This can lead to a...
SUSE CVE-2026-74382
In the Linux kernel, the following vulnerability has been resolved: net/sched: clsbpf: prevent unbounded recursion in offload rollback Quan Sun reported 1 a stack overflow in clsbpfoffloadcmd. Reproducer on netdevsim: add a skipsw clsbpf filter, set the bpftcaccept debugfs knob to 0, then tc filt...
PT-2026-85016
Name of the Vulnerable Software and Affected Versions gfs2-utils affected versions not specified Description A stack overflow occurs in the hash table traversal code within metawalk.c. The issue arises because the alloca function is used with a size derived exponentially from the di depth field...
PT-2026-90907
A stack overflow vulnerability was found in gfs2-utils. The metadata walk code in metawalk.c uses alloca with an untrusted inode height value from on-disk metadata without bounds validation, causing stack exhaustion and a denial of service when processing crafted GFS2 filesystem images...
CVE-2026-85437: Out-of-bounds Write
MOOS-IvP through 24.8.1 contains multiple buffer overflow vulnerabilities in IvP function string decoders that trust attacker-controlled length fields without validation. Attackers can craft malicious encoded strings with mismatched declared and actual field lengths to overflow heap and stack...
CVE-2026-71219: Allocation of Resources Without Limits or Throttling
A stack overflow vulnerability was found in gfs2-utils. The hash table traversal code in metawalk.c uses alloca with an exponentially-derived size from the untrusted on-disk didepth field without bounds validation. A crafted GFS2 filesystem image with a large didepth value causes stack exhaustion...
PT-2026-85020
Name of the Vulnerable Software and Affected Versions gfs2-utils affected versions not specified Description A stack overflow occurs in the metadata walk code within metawalk.c. The issue arises because the alloca function is used with an untrusted inode height value retrieved from on-disk metada...
Linux Distros Unpatched Vulnerability : CVE-2026-71219
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack overflow vulnerability was found in gfs2-utils. The hash table traversal code in metawalk.c uses alloca with an exponentially-derived size from the...
PT-2026-90906
A stack overflow vulnerability was found in gfs2-utils. The hash table traversal code in metawalk.c uses alloca with an exponentially-derived size from the untrusted on-disk di depth field without bounds validation. A crafted GFS2 filesystem image with a large di depth value causes stack exhausti...
PT-2026-85018
Name of the Vulnerable Software and Affected Versions gfs2-utils affected versions not specified Description A stack out-of-bounds write issue exists in the savemeta function. The height value retrieved from on-disk inode metadata is used as a loop bound without proper bounds checking. This leads...
CVE-2026-71224: Allocation of Resources Without Limits or Throttling
A stack overflow vulnerability was found in gfs2-utils. The metadata walk code in metawalk.c uses alloca with an untrusted inode height value from on-disk metadata without bounds validation, causing stack exhaustion and a denial of service when processing crafted GFS2 filesystem images...