UVI-2021-1000408 hfsplus: prevent corruption in shrinking truncate

hfsplus: prevent corruption in shrinking truncate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.120 by commit...

UVI-2021-1000445 hfsplus: prevent corruption in shrinking truncate

hfsplus: prevent corruption in shrinking truncate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.191 by commit...

UVI-2021-1000197 f2fs: compress: fix race condition of overwrite vs truncate

f2fs: compress: fix race condition of overwrite vs truncate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.5 by commit...

GSD-2021-1000408 hfsplus: prevent corruption in shrinking truncate

hfsplus: prevent corruption in shrinking truncate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.120 by commit...

GSD-2021-1000197 f2fs: compress: fix race condition of overwrite vs truncate

f2fs: compress: fix race condition of overwrite vs truncate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.5 by commit...

PT-2021-28662

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.6 through v5.12.4 Description A race condition exists between overwrite and truncate operations in the f2fs compress functionality. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

PT-2021-24668

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.6 through v5.12.4 Description A race condition exists between overwrite and truncate operations in the f2fs compress functionality. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

WS-2021-0324

Linux/Kernel in versions v5.14-rc1 is vulnerable to race condition of overwrite vs truncate...

PT-2021-28785

Name of the Vulnerable Software and Affected Versions hfsplus versions prior to v5.10.38 Description The issue is related to preventing corruption in shrinking truncate. It was introduced in version v4.19 and fixed in Linux Kernel version v5.10.38. The actual impact and attack plausibility have n...

PT-2021-24879

Name of the Vulnerable Software and Affected Versions: hfsplus versions prior to v5.4.120 Description: The issue is related to preventing corruption in shrinking truncate. The actual impact and attack plausibility have not yet been proven. Recommendations: For versions prior to v5.4.120, update t...

PT-2021-24674

Name of the Vulnerable Software and Affected Versions hfsplus versions prior to v5.12.5 Description The issue is related to preventing corruption in shrinking truncate. It was introduced in version v4.19 and fixed in Linux Kernel version v5.12.5. The actual impact and attack plausibility have not...

PT-2021-28910

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.191 Description The issue is related to preventing corruption in shrinking truncate in hfsplus. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-24791

Name of the Vulnerable Software and Affected Versions hfsplus versions prior to v5.10.38 Description The issue is related to preventing corruption in shrinking truncate. It was introduced in version v4.19 and fixed in Linux Kernel version v5.10.38. The actual impact and attack plausibility have n...

PT-2021-28873

Name of the Vulnerable Software and Affected Versions hfsplus versions prior to v5.4.120 Description The issue is related to preventing corruption in shrinking truncate. It was introduced in version v4.19 and fixed in Linux Kernel version v5.4.120. The actual impact and attack plausibility have n...

PT-2021-8270

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the hfsplus file truncate function in the Linux kernel, which can cause corruption and data loss when shrinking truncate happens to the middle of an extent record...

PT-2024-11090 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.12.0-rc1-custom 1 Description: The issue is caused by a race condition between truncate and overwrite operations in the f2fs compress functionality. This can lead to a situation where a page is detached from t...

RUSTSEC-2020-0089 nanorand 0.5.0 - RNGs failed to generate properly for non-64-bit numbers

In versions of nanorand prior to 0.5.1, RandomGen implementations for standard unsigned integers could fail to properly generate numbers, due to using bit-shifting to truncate a 64-bit number, rather than just an as conversion. This often manifested as RNGs returning nothing but 0, including the...

nanorand 0.5.0 - RNGs failed to generate properly for non-64-bit numbers

In versions of nanorand prior to 0.5.1, RandomGen implementations for standard unsigned integers could fail to properly generate numbers, due to using bit-shifting to truncate a 64-bit number, rather than just an as conversion. This often manifested as RNGs returning nothing but 0, including the...

Django: backtracking in a regular expression in django.utils.text.Truncator leads to DoS

An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. If django.utils.text.Truncator's chars and words methods were passed the html=True argument, they were extremely slow to evaluate certain inputs due to a catastrophic backtracking vulnerability i...

CVE-2020-19888

DBHcms v1.2.0 has an unauthorized operation vulnerability because there's no access control at line 175 of dbhcms\page.php for empty cache operation. This vulnerability can be exploited to empty a table...