CVE-2019-20425

creationtimestamp| type| source ---|---|--- 2020-01-27 08:37:44+00:00| seen| https://t.me/cveNotify/431...

CVE-2019-20425

In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds access and panic due to the lack of validation for specific fields of packets sent by a client. In the function lustremsgstring, there is no validation of a certain length value derived from lustremsgbuflenv2...

CVE-2019-20425

CVE-2019-20425 affects Lustre file system ptlrpc module prior to 2.12.3, where an out-of-bounds access and panic arise from insufficient validation of certain fields in client packets, specifically due to lack of validation of a length value derived from lustre_msg_buflen_v2 in lustre_msg_string....