[SECURITY] Fedora 34 Update: testdisk-7.1-7.fc34

Tool to check and undelete partition. Works with FAT12, FAT16, FAT32, NTFS, ext2, ext3, ext4, btrfs, BeFS, CramFS, HFS, JFS, Linux Raid, Linux Swap, LVM, LVM2, NSS, ReiserFS, UFS, XFS. PhotoRec is a signature based file recovery utility. It handles more than 440 file formats including JPG,...

openSUSE Security Update : Kernel (openSUSE-SU-2012:0799-1)

This kernel update of the openSUSE 12.1 kernel fixes lots of bugs and security issues. Following issues were fixed : - tcp: drop SYN+FIN messages bnc765102. - net: sock: validate datalen before allocating skb in sockallocsendpskb bnc765320, CVE-2012-2136. - fcaps: clear the same personality flags...

Linux kernel DoS

Crash on BeFS filesystem parsing...

CVE-2011-2928

The befsfollowlink function in fs/befs/linuxvfs.c in the Linux kernel before 3.1-rc3 does not validate the length attribute of long symlinks, which allows local users to cause a denial of service incorrect pointer dereference and OOPS by accessing a long symlink on a malformed Be filesystem...

CVE-2011-2928

CVE-2011-2928 affects the Linux kernel prior to 3.1-rc3, specifically the befs_follow_link function in fs/befs/linuxvfs.c. The flaw does not validate the length attribute of long symlinks on a malformed Be filesystem, enabling a local attacker to trigger an incorrect pointer dereference and OOPS,...

CVE-2011-2928: NULL Pointer Dereference

The befsfollowlink function in fs/befs/linuxvfs.c in the Linux kernel before 3.1-rc3 does not validate the length attribute of long symlinks, which allows local users to cause a denial of service incorrect pointer dereference and OOPS by accessing a long symlink on a malformed Be filesystem...

Linux Kernel 'fs/befs/linuxvfs.c'本地拒绝服务漏洞

Bugtraq ID: 49256 Linux是一款开放源代码的操作系统。 Be文件系统驱动存在安全漏洞，通过破坏的Be文件系统可触发内核崩溃。 在fs/befs/linuxvfs.c中， befsfollowlink读取从Be文件系统中的数据流中读取长符号链接的长度属性： befsdatastream data = &befsino-idata.ds; befsofft len = data-size; 由于对data-size / len长度进行验证，在一个破坏的文件系统上可以设置为"0"。...