CVE-2018-13095

An issue was discovered in fs/xfs/libxfs/xfsinodebuf.c in the Linux kernel through 4.17.3. A denial of service memory corruption and BUG can occur for a corrupted xfs image upon encountering an inode that is in extent format, but has more extents than fit in the inode fork...

CVE-2018-13093

An issue was discovered in fs/xfs/xfsicache.c in the Linux kernel through 4.17.3. There is a NULL pointer dereference and panic in lookupslow on a NULL inode-iops pointer when doing pathwalks on a corrupted xfs image. This occurs because of a lack of proper validation that cached inodes are free...

CVE-2018-13093

An issue was discovered in fs/xfs/xfsicache.c in the Linux kernel through 4.17.3. There is a NULL pointer dereference and panic in lookupslow on a NULL inode-iops pointer when doing pathwalks on a corrupted xfs image. This occurs because of a lack of proper validation that cached inodes are free...

Linux kernel denial of service vulnerability (CNVD-2018-12665)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A denial of service vulnerability exists in fs/xfs/libxfs/xfsinodebuf.c in 4.17.3 and earlier versions of the Linux...

CVE-2018-13094

An issue was discovered in fs/xfs/libxfs/xfsattrleaf.c in the Linux kernel through 4.17.3. An OOPS may occur for a corrupted xfs image after xfsdashrinkinode is called with a NULL bp...

Linux kernel OOPS null pointer reference vulnerability

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the file s/xfs/libxfs/xfsattrleaf.c in Linux kernel version 4.17.3 and earlier. An attacker can exploit this vulnerability to cause...

PT-2018-11597

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.17.4 Description An issue was discovered in the Linux kernel that may cause an OOPS for a corrupted xfs image after the function xfs da shrink inode is called with a NULL bp. Recommendations For Linux kernel...

CVE-2018-13094: NULL Pointer Dereference

An issue was discovered in fs/xfs/libxfs/xfsattrleaf.c in the Linux kernel through 4.17.3. An OOPS may occur for a corrupted xfs image after xfsdashrinkinode is called with a NULL bp...

CVE-2018-13095: Out-of-bounds Write

An issue was discovered in fs/xfs/libxfs/xfsinodebuf.c in the Linux kernel through 4.17.3. A denial of service memory corruption and BUG can occur for a corrupted xfs image upon encountering an inode that is in extent format, but has more extents than fit in the inode fork...

UBUNTU-CVE-2018-13094

An issue was discovered in fs/xfs/libxfs/xfsattrleaf.c in the Linux kernel through 4.17.3. An OOPS may occur for a corrupted xfs image after xfsdashrinkinode is called with a NULL bp...

UBUNTU-CVE-2018-13093

An issue was discovered in fs/xfs/xfsicache.c in the Linux kernel through 4.17.3. There is a NULL pointer dereference and panic in lookupslow on a NULL inode-iops pointer when doing pathwalks on a corrupted xfs image. This occurs because of a lack of proper validation that cached inodes are free...

PT-2018-11596

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.17.4 Description A NULL pointer dereference and panic can occur in the lookup slow function when doing pathwalks on a corrupted xfs image. This issue arises due to a lack of proper validation that cached inodes...

CVE-2018-13093: NULL Pointer Dereference

An issue was discovered in fs/xfs/xfsicache.c in the Linux kernel through 4.17.3. There is a NULL pointer dereference and panic in lookupslow on a NULL inode-iops pointer when doing pathwalks on a corrupted xfs image. This occurs because of a lack of proper validation that cached inodes are free...

Linux kernel denial of service vulnerability (CNVD-2018-12664)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A denial of service vulnerability exists in fs/xfs/xfsicache.c in 4.17.3 and earlier versions of the Linux kernel. An...

CVE-2018-13093

An issue was discovered in fs/xfs/xfsicache.c in the Linux kernel through 4.17.3. There is a NULL pointer dereference and panic in lookupslow on a NULL inode-iops pointer when doing pathwalks on a corrupted xfs image. This occurs because of a lack of proper validation that cached inodes are free...

PT-2018-3798

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 4.17.3 Description An issue in the Linux kernel can cause a denial of service, resulting in memory corruption and a BUG, when encountering a corrupted xfs image with an inode in extent format that has more extents...

OracleVM 3.3 : Unbreakable / etc (OVMSA-2018-0231)

The remote OracleVM system is missing necessary patches to address critical security updates : - x86/fpu: Make eager FPU default Mihai Carabas Orabug: 28156176 CVE-2018-3665 - KVM: Fix stack-out-of-bounds read in writemmio Wanpeng Li Orabug: 27951287 CVE-2017-17741 CVE-2017-17741 - xfs: set forma...

CVE-2018-0355

Cisco CUCM Web UI is affected by a Cross-Frame Scripting (XFS) vulnerability due to insufficient iframe protections. An unauthenticated, remote attacker could lure a user to an attacker-controlled page containing a malicious iframe, enabling clickjacking or other client-side browser attacks on th...

PT-2018-8782

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager Unified CM affected versions not specified Description A vulnerability in the web UI could allow an unauthenticated, remote attacker to conduct a cross-frame scripting XFS attack against the user of the web...

CVE-2018-0355: Improper Input Validation

A vulnerability in the web UI of Cisco Unified Communications Manager Unified CM could allow an unauthenticated, remote attacker to conduct a cross-frame scripting XFS attack against the user of the web UI of an affected system. The vulnerability is due to insufficient protections for HTML inline...