DEBIAN-CVE-2024-26981

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix OOB in nilfssetdetype The size of the nilfstypebymode array in the fs/nilfs2/dir.c file is defined as "SIFMT SSHIFT", but the nilfssetdetype function, which uses this array, specifies the index to read from the array ...

SUSE CVE-2007-3961

Off-by-one error in the fspreaddirr function in fsplib.c in fsplib before 0.9 allows remote attackers to cause a denial of service via a directory entry whose length is exactly MAXNAMELEN, which prevents a terminating null byte from being added...

SUSE CVE-2015-2331

Integer overflow in the zipcdirnew function in zipdirent.c in libzip 0.11.2 and earlier, as used in the ZIP extension in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 and other products, allows remote attackers to cause a denial of service application crash or possibly execute...

sleuthkit:sleuthkit_fls_ntfs_fuzzer: Heap-buffer-overflow in tsk_UTF16toUTF8

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5124116049166336 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflsntfsfuzzer Job Type: libfuzzerasansleuthkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Cras...

GSD-2022-1008167 ext4: fix BUG_ON() when directory entry has invalid rec_len

ext4: fix BUGON when directory entry has invalid reclen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.224 by commit...

GSD-2022-1008078 ext4: fix BUG_ON() when directory entry has invalid rec_len

ext4: fix BUGON when directory entry has invalid reclen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.154 by commit...

GSD-2022-1007964 ext4: fix BUG_ON() when directory entry has invalid rec_len

ext4: fix BUGON when directory entry has invalid reclen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.78 by commit...

GSD-2022-1007808 ext4: fix BUG_ON() when directory entry has invalid rec_len

ext4: fix BUGON when directory entry has invalid reclen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.8 by commit...

PT-2022-36219 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.78 Description: A potential issue exists in the ext4 file system, where a directory entry with an invalid rec len could trigger a BUG ON condition. The actual impact and attack plausibility of this issue...

PT-2022-36063 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.8 Description: The issue is related to the ext4 file system, where a directory entry with an invalid rec len can trigger a BUG ON condition. The actual impact and potential for exploitation have not been...

PT-2025-18596

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, specifically in the ext4 filesystem. The issue arises when a directory entry has an invalid rec len field, which must be a multiple...

libyal:libfsfat_file_entry_fuzzer: Crash in libfsfat_directory_entry_free

Detailed Report: https://oss-fuzz.com/testcase?key=5142626399027200 Project: libyal Fuzzing Engine: libFuzzer Fuzz Target: libfsfatfileentryfuzzer Job Type: libfuzzerasani386libyal Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x0000c1b1 Crash State: libfsfatdirectoryentryfree...

libyal:libfsfat_file_entry_fuzzer: Crash in libfsfat_directory_entry_free

Detailed Report: https://oss-fuzz.com/testcase?key=4564086116974592 Project: libyal Fuzzing Engine: libFuzzer Fuzz Target: libfsfatfileentryfuzzer Job Type: libfuzzerasani386libyal Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x0000c1b1 Crash State: libfsfatdirectoryentryfree...

Hancom Office 2020 Hword HwordApp.dll SectorLoc heap-based buffer overflow

Summary A heap-based buffer overflow vulnerability exists in the Hword HwordApp.dll functionality of Hancom Office 2020 11.0.0.2353. A specially-crafted malformed file can lead to memory corruption and potential arbitrary code execution. An attacker can provide a malicious file to trigger this...

squashfs_opendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry; this is then used by unsquashfs to create the new file during the unsquash. The filename is not validated for traversal outside of the destination directory and thus allows writing to locations outside of the destination.

...

ALPINE-CVE-2022-22844

LibTIFF 4.3.0 has an out-of-bounds read in TIFFmemcpy in tifunix.c in certain situations involving a custom tag and 0x0200 as the second word of the DE field...

UBUNTU-CVE-2022-22844

LibTIFF 4.3.0 has an out-of-bounds read in TIFFmemcpy in tifunix.c in certain situations involving a custom tag and 0x0200 as the second word of the DE field...

UBUNTU-CVE-2021-40153

squashfsopendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry; this is then used by unsquashfs to create the new file during the unsquash. The filename is not validated for traversal outside of the destination directory, and thus allows writing to locations...

Path traversal

squashfsopendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry; this is then used by unsquashfs to create the new file during the unsquash. The filename is not validated for traversal outside of the destination directory, and thus allows writing to locations...

PT-2021-28243

Name of the Vulnerable Software and Affected Versions: libfsext affected versions not specified Description: The issue is related to a crash caused by an unknown read. Technical details about the crash include the involvement of specific functions such as libfsext directory entry read data,...