CVE-2019-11689

CVE-2019-11689 affects ASUSTOR exFAT Driver up to version 1.0.0.r20. During license validation, the components exfat.cgi and exfatctl fail to properly validate server responses and pass unsanitized text to the system shell, enabling code execution as root. Red Hat and NVD entries corroborate the ...

CVE-2019-11689

An issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20. When conducting license validation, exfat.cgi and exfatctl fail to properly validate server responses and pass unsanitized text to the system shell, resulting in code execution as root...

CVE-2019-11688

ASUSTOR exFAT Driver (affected: 1.0.0.r20 and earlier) contains a Missing SSL Certificate Validation flaw in license validation paths. Specifically, exfat.cgi and exfatctl accept any certificate for asustornasapi.asustor.com, enabling potential interception or tampering during license checks. Con...

CVE-2019-11688

An issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20. When conducting license validation, exfat.cgi and exfatctl accept any certificate for asustornasapi.asustor.com. In other words, there is Missing SSL Certificate Validation...

Updated kernel packages fix security vulnerabilities

This update is based on upstream 5.5.9 and fixes at least the following security vulnerabilities: In the Linux kernel 5.4.0-rc2, there is a use-after-free read in the blkaddtrace function in kernel/trace/blktrace.c which is used to fill out a blkiotrace structure and place it in a per-cpu...

Updated sleuthkit packages fix security vulnerabilities

Updated sleuthkit packages fix security vulnerabilities: In The Sleuth Kit TSK 4.4.2, opening a crafted ISO 9660 image triggers an out-of-bounds read in iso9660procdir in tsk/fs/iso9660dent.c in libtskfs.a, as demonstrated by fls CVE-2017-13755. In The Sleuth Kit TSK 4.4.2, opening a crafted disk...

CVE-2017-13760

In The Sleuth Kit TSK 4.4.2, fls hangs on a corrupt exfat image in tskimgread in tsk/img/imgio.c in libtskimg.a...

Hardcoded credentials

In The Sleuth Kit TSK 4.4.2, fls hangs on a corrupt exfat image in tskimgread in tsk/img/imgio.c in libtskimg.a...

CVE-2017-13760

In The Sleuth Kit TSK 4.4.2, fls hangs on a corrupt exfat image in tskimgread in tsk/img/imgio.c in libtskimg.a...

CVE-2017-13760

In The Sleuth Kit TSK 4.4.2, fls hangs on a corrupt exfat image in tskimgread in tsk/img/imgio.c in libtskimg.a...

DEBIAN-CVE-2017-13760

In The Sleuth Kit TSK 4.4.2, fls hangs on a corrupt exfat image in tskimgread in tsk/img/imgio.c in libtskimg.a...

UBUNTU-CVE-2017-13760

In The Sleuth Kit TSK 4.4.2, fls hangs on a corrupt exfat image in tskimgread in tsk/img/imgio.c in libtskimg.a...

CVE-2017-13760

CVE-2017-13760 affects The Sleuth Kit (TSK) 4.4.2, where fls hangs when processing a corrupt exFAT image due to a flaw in tsk_img_read() (tsk/img/img_io.c, libtskimg.a). The issue is explicitly noted in multiple open-source advisories and Debian/Mageia references tied to TSK 4.4.2 with exFAT scen...

CVE-2017-13760

In The Sleuth Kit TSK 4.4.2, fls hangs on a corrupt exfat image in tskimgread in tsk/img/imgio.c in libtskimg.a...

CVE-2017-13760

In The Sleuth Kit TSK 4.4.2, fls hangs on a corrupt exfat image in tskimgread in tsk/img/imgio.c in libtskimg.a...

CVE-2015-8026

Heap-based buffer overflow in the verifyvbrchecksum function in exfatfsck in exfat-utils before 1.2.1 allows remote attackers to cause a denial of service infinite loop or possibly execute arbitrary code via a crafted filesystem...

Heap overflow

Heap-based buffer overflow in the verifyvbrchecksum function in exfatfsck in exfat-utils before 1.2.1 allows remote attackers to cause a denial of service infinite loop or possibly execute arbitrary code via a crafted filesystem...

UBUNTU-CVE-2015-8026

Heap-based buffer overflow in the verifyvbrchecksum function in exfatfsck in exfat-utils before 1.2.1 allows remote attackers to cause a denial of service infinite loop or possibly execute arbitrary code via a crafted filesystem...

DEBIAN-CVE-2015-8026

Heap-based buffer overflow in the verifyvbrchecksum function in exfatfsck in exfat-utils before 1.2.1 allows remote attackers to cause a denial of service infinite loop or possibly execute arbitrary code via a crafted filesystem...

CVE-2015-8026

CVE-2015-8026 describes a heap-based buffer overflow in the verify_vbr_checksum function of exfatfsck in exfat-utils before 1.2.1. The vulnerability allows an attacker to cause a denial of service (infinite loop) and potentially execute arbitrary code via a crafted filesystem. Affected component ...