Lucene search
+L

6234 matches found

Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•6 views

PT-2022-29874

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.16.18 Description The issue concerns a performance optimization in the ext4 file system. It was introduced in version v5.13 and fixed in version v5.16.19. The actual impact and attack plausibility have no...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•6 views

PT-2022-30324

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description The issue is related to the ext4 file system, specifically with the ext4 mb mark bb function when used with flex bg and fast commit. The actual impact and potential for attack have not been...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•3 views

PT-2022-29567

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.17.1 Description The issue concerns the mb optimize scan performance mount option in the ext4 filesystem, which does not work correctly with extents. This problem was introduced in version v5.13 and is...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/04/18 12:00 a.m.•4 views

PT-2022-3035

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free flaw was found in the dx insert block function in fs/ext4/namei.c of the Linux kernel's filesystem sub-component. This issue is related to the use of memory after it has...

7.2CVSS5.8AI score0.00293EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2022/04/11 8:20 a.m.•60 views

CVE-2022-28796

A use-after-free flaw was found in the Linux kernel’s journaling layer of the ext4 and OCFS2 file system functionality in the way a user can trigger a race condition during writing to the file system. This flaw allows a local user to crash or potentially escalate their privileges on the system...

7CVSS6.5AI score0.00325EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/03/30 12:00 a.m.•16 views

PT-2022-3220 · Nvidia · Nvidia Jetson Linux Driver Package

Name of the Vulnerable Software and Affected Versions: NVIDIA Jetson Linux Driver Package affected versions not specified Description: The issue is related to insufficient validation of untrusted data in the Cboot ext4 read file function, which may lead to an integer overflow. This could allow a...

5.7CVSS5.6AI score0.00246EPSS
SaveExploits0References6
osv_debian
osv_debian
•added 2022/03/04 6:15 p.m.•9 views

DEBIAN-CVE-2021-3428

A flaw was found in the Linux kernel. A denial of service problem is identified if an extent tree is corrupted in a crafted ext4 filesystem in fs/ext4/extents.c in ext4escacheextent. Fabricating an integer overflow, A local attacker with a special user privilege may cause a system crash problem...

5.5CVSS6.2AI score0.00301EPSS
SaveExploits0References1
NVD
NVD
•added 2022/03/04 6:15 p.m.•21 views

CVE-2021-3428

A flaw was found in the Linux kernel. A denial of service problem is identified if an extent tree is corrupted in a crafted ext4 filesystem in fs/ext4/extents.c in ext4escacheextent. Fabricating an integer overflow, A local attacker with a special user privilege may cause a system crash problem...

5.5CVSS0.00301EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2022/03/04 6:15 p.m.•13 views

CVE-2021-3428

A flaw was found in the Linux kernel. A denial of service problem is identified if an extent tree is corrupted in a crafted ext4 filesystem in fs/ext4/extents.c in ext4escacheextent. Fabricating an integer overflow, A local attacker with a special user privilege may cause a system crash problem...

5.5CVSS7.5AI score
SaveExploits0References3
Prion
Prion
•added 2022/03/04 6:15 p.m.•29 views

Integer overflow

A flaw was found in the Linux kernel. A denial of service problem is identified if an extent tree is corrupted in a crafted ext4 filesystem in fs/ext4/extents.c in ext4escacheextent. Fabricating an integer overflow, A local attacker with a special user privilege may cause a system crash problem...

4.9CVSS5.7AI score0.00301EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2022/03/04 5:19 p.m.•68 views

CVE-2021-3428

A flaw was found in the Linux kernel. A denial of service problem is identified if an extent tree is corrupted in a crafted ext4 filesystem in fs/ext4/extents.c in ext4escacheextent. Fabricating an integer overflow, A local attacker with a special user privilege may cause a system crash problem...

6.6AI score0.00301EPSS
SaveExploits0References3
Mend
Mend
•added 2022/03/04 5:19 p.m.•8 views

CVE-2021-3428

A flaw was found in the Linux kernel. A denial of service problem is identified if an extent tree is corrupted in a crafted ext4 filesystem in fs/ext4/extents.c in ext4escacheextent. Fabricating an integer overflow, A local attacker with a special user privilege may cause a system crash problem...

6.8CVSS0.00301EPSS
SaveExploits0References7
CVE
CVE
•added 2022/03/04 5:19 p.m.•281 views

CVE-2021-3428

CVE-2021-3428 describes a Linux kernel flaw in ext4: crafting an ext4 extent can overflow an integer in fs/ext4/extents.c (ext4_es_cache_extent), potentially allowing a local attacker with a privileged user to crash the system and cause an availability impact. Connected Nessus entry (UNITY_LINUX_...

5.5CVSS6.2AI score0.00301EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
•added 2022/03/04 5:19 p.m.•115 views

CVE-2021-3428

A flaw was found in the Linux kernel. A denial of service problem is identified if an extent tree is corrupted in a crafted ext4 filesystem in fs/ext4/extents.c in ext4escacheextent. Fabricating an integer overflow, A local attacker with a special user privilege may cause a system crash problem...

5.5CVSS6.3AI score0.00301EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2022/03/04 9:52 a.m.•49 views

CVE-2022-0850

An information leak flaw was found via ext4extentheader in fs/ext4/extents.c in the Linux kernel. This flaw could allow a local attacker to cause a denial of service. Mitigation Mitigation for this issue is either not available or the currently available options dont meet the Red Hat Product...

7.1CVSS6.4AI score0.00431EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/04 12:00 a.m.•10 views

CVE-2021-3428: Integer Overflow or Wraparound

A flaw was found in the Linux kernel. A denial of service problem is identified if an extent tree is corrupted in a crafted ext4 filesystem in fs/ext4/extents.c in ext4escacheextent. Fabricating an integer overflow, A local attacker with a special user privilege may cause a system crash problem...

5.5CVSS5.8AI score0.00301EPSS
SaveExploits0References3
osv_gsd
osv_gsd
•added 2022/02/27 3:40 a.m.•15 views

GSD-2022-1000682 ext4: fix error handling in ext4_fc_record_modified_inode()

ext4: fix error handling in ext4fcrecordmodifiedinode This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.8 by commit...

7.2AI score
SaveExploits0
osv_gsd
osv_gsd
•added 2022/02/27 3:28 a.m.•20 views

GSD-2022-1000595 ext4: fix error handling in ext4_fc_record_modified_inode()

ext4: fix error handling in ext4fcrecordmodifiedinode This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.22 by commit...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/02/27 12:00 a.m.•5 views

PT-2022-28869

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.22 Description The issue concerns error handling in the ext4 fc record modified inode function. The actual impact and potential for exploitation have not been fully determined. Recommendations For Linux...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/02/27 12:00 a.m.•7 views

PT-2022-28956

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.8 Description The issue concerns error handling in the ext4 fc record modified inode function. The actual impact and potential for attack have not been proven yet. Recommendations For Linux Kernel versions...

5.7AI score
SaveExploits0References1
Rows per page
Query Builder