kernel: filesystem corruption due to an unchecked error condition during an xfs attribute change

In the Linux kernel before 4.17, a local attacker able to set attributes on an xfs filesystem could make this filesystem non-operational until the next mount by triggering an unchecked error condition during an xfs attribute change, because xfsattrshortformaddname in fs/xfs/libxfs/xfsattr.c...

CVE-2018-18690: Improper Check for Unusual or Exceptional Conditions

In the Linux kernel before 4.17, a local attacker able to set attributes on an xfs filesystem could make this filesystem non-operational until the next mount by triggering an unchecked error condition during an xfs attribute change, because xfsattrshortformaddname in fs/xfs/libxfs/xfsattr.c...

PT-2018-1922

Name of the Vulnerable Software and Affected Versions HDF5 versions 1.10.3 and earlier Description A heap-based buffer over-read issue in the H5O attr decode function in H5Oattr.c allows attackers to cause a denial of service via a crafted HDF5 file. This issue can be triggered by converting an H...

CVE-2017-2618

A flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files before 4.9.10. An empty null write to this file can crash the system by causing the system to attempt to access unmapped kernel memory...

CVE-2017-2618: Off-by-one Error

A flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files before 4.9.10. An empty null write to this file can crash the system by causing the system to attempt to access unmapped kernel memory...

PT-2018-12225

Name of the Vulnerable Software and Affected Versions MusicCenter / Trivum Multiroom Setup Tool versions prior to V9.34 build 13381 Description The issue allows unauthorized remote attackers to reset authentication via the "/xml/system/setAttribute.xml" API endpoint, using a GET request with...

Linux kernel OOPS null pointer reference vulnerability

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the file s/xfs/libxfs/xfsattrleaf.c in Linux kernel version 4.17.3 and earlier. An attacker can exploit this vulnerability to cause...

PT-2018-2685

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.17 Description The issue is related to the xfs attr shortform addname function in the XFS filesystem implementation, which mishandles ATTR REPLACE operations when converting an attribute from short to long form...

PT-2018-5542

Name of the Vulnerable Software and Affected Versions: Android versions 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 Description: The issue is related to an out of bounds write in the process service search attr req function due to a missing bounds check. This could potentially lead to remote...

PT-2017-13745

Name of the Vulnerable Software and Affected Versions Android for MSM versions affected versions not specified Firefox OS for MSM versions affected versions not specified QRD Android versions affected versions not specified Description A buffer overrun issue occurs when processing the QCA NL80211...

PT-2017-11732

Name of the Vulnerable Software and Affected Versions Android for MSM versions prior to the fixed version Firefox OS for MSM versions prior to the fixed version QRD Android versions prior to the fixed version All Android releases from CAF using the Linux kernel versions prior to the fixed version...

PT-2017-12874

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the RADIUS parser, specifically in the print attr string function within print-radius.c. Recommendations For versions prior to 4.9.2, update to version...

PT-2017-12833

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue concerns a buffer over-read in the BGP parser, specifically within the bgp attr print function in print-bgp.c. This problem affects the tcpdump tool. Recommendations For versions prior to...

PT-2017-12889

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the BGP parser, specifically in the bgp attr print function within print-bgp.c. Recommendations For versions prior to 4.9.2, update to version 4.9.2 or...

PT-2017-12830

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue concerns a buffer over-read in the BGP parser component of tcpdump, specifically in the bgp attr print function within print-bgp.c. This could allow a remote attacker to obtain sensitive...

PT-2022-7878

Name of the Vulnerable Software and Affected Versions MediaWiki versions 1.23.x through 1.23.15 MediaWiki versions 1.24.x through 1.27.x before 1.27.2 MediaWiki versions 1.28.x before 1.28.1 Description The issue allows remote attackers to discover the IP addresses of Wiki visitors via a...

PT-2017-18671

Name of the Vulnerable Software and Affected Versions libdwarf version 2017-03-21 Description A heap-based buffer over-read issue was discovered in the dwarf formsdata function due to a failure to check a pointer for being in bounds and a failure in a check in the dwarf attr list function...

DEBIAN-CVE-2017-6307

An issue was discovered in tnef before 1.4.13. Two OOB Writes have been identified in src/mapiattr.c:mapiattrread. These might lead to invalid read and write operations, controlled by an attacker...

PT-2017-16986

Name of the Vulnerable Software and Affected Versions tnef versions prior to 1.4.13 Description An issue in tnef allows for out-of-bounds writes in the mapi attr read function, potentially leading to invalid read and write operations controlled by an attacker. Recommendations For versions prior t...

PT-2017-8666

Name of the Vulnerable Software and Affected Versions libdwarf versions prior to 20160923 Description The issue allows remote attackers to cause a denial of service out-of-bounds read via a crafted object with all-bits on. This is due to a problem in the get attr value function. Recommendations F...