Lucene search
+L

664 matches found

OSV
OSV
added 2022/01/20 6:15 p.m.22 views

CVE-2021-45417

AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata such as XFS extended attributes or tmpfs ACLs, because of a heap-based buffer overflow...

7.8CVSS7.5AI score
SaveExploits0References6
Prion
Prion
added 2022/01/20 6:15 p.m.30 views

Heap overflow

AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata such as XFS extended attributes or tmpfs ACLs, because of a heap-based buffer overflow...

7.2CVSS7.4AI score0.00493EPSS
SaveExploits1References6Affected Software7
UbuntuCve
UbuntuCve
added 2022/01/20 2:00 p.m.64 views

CVE-2021-45417

AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata such as XFS extended attributes or tmpfs ACLs, because of a heap-based buffer overflow...

7.8CVSS7.4AI score0.00493EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2022/01/20 12:00 a.m.7 views

Aide 缓冲区错误漏洞

Aide is a tool for monitoring file system changes. It can be used to detect unauthorized monitored files and directories. Aide has a buffer error vulnerability that stems from a heap-based buffer overflow vulnerability in AIDE's base64 function. An attacker could crash the program and possibly...

7.8CVSS8.2AI score0.00493EPSS
SaveExploits1References25
OSV
OSV
added 2022/01/07 11:04 a.m.20 views

OESA-2022-1484 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel through 5.15.2, mwifiexusbrecv in drivers/net/wireless/marvell/mwifiex/usb.c allows an attacker who can connect a crafted USB device to cause a denial of service skboverpanic.CVE-2021-43976 In bpfskbchangehead...

8.4CVSS5.9AI score0.00702EPSS
SaveExploits3References12
OSV
OSV
added 2021/12/23 7:15 p.m.11 views

AZL-7073 CVE-2021-45469 affecting package kernel for versions less than 5.15.18.1-1

In f2fssetxattr in fs/f2fs/xattr.c in the Linux kernel through 5.15.11, there is an out-of-bounds memory access when an inode has an invalid last xattr entry...

7.8CVSS6.7AI score0.00549EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2021/07/16 12:00 a.m.63 views

EulerOS 2.0 SP5 : kernel (EulerOS-SA-2021-2221)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the...

7.8CVSS7.4AI score0.03132EPSS
SaveExploits1References14
OSV
OSV
added 2021/05/26 1:15 p.m.20 views

AZL-31148 CVE-2020-27815 affecting package kernel for versions less than 5.15.135.1-2

A flaw was found in the JFS filesystem code in the Linux Kernel which allows a local attacker with the ability to set extended attributes to panic the system, causing memory corruption or escalating privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well a...

7.8CVSS6.7AI score0.00788EPSS
SaveExploits1References1
OSV
OSV
added 2021/05/26 1:15 p.m.1 views

DEBIAN-CVE-2020-27815

A flaw was found in the JFS filesystem code in the Linux Kernel which allows a local attacker with the ability to set extended attributes to panic the system, causing memory corruption or escalating privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well a...

7.8CVSS6.3AI score0.00788EPSS
SaveExploits1References1
OSV
OSV
added 2021/05/26 1:15 p.m.10 views

AZL-34856 CVE-2020-27815 affecting package kernel for versions less than 6.6.29.1-4

A flaw was found in the JFS filesystem code in the Linux Kernel which allows a local attacker with the ability to set extended attributes to panic the system, causing memory corruption or escalating privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well a...

7.8CVSS6.7AI score0.00788EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:00 a.m.13 views

The vulnerability in the receive_xattr function of the xattrs.c utility for file transfer and synchronization in Rsync, related to reading beyond the buffer data limit, allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability in the receivexattr function of the xattrs.c utility for transferring and synchronizing files in Rsync relates to the lack of checking for the presence of a trailing dot in the file name. Exploiting this vulnerability could allow an attacker to gain access to confidential data,...

9.8CVSS6.7AI score0.05163EPSS
SaveExploits0References8Affected Software4
RedHat Linux
RedHat Linux
added 2020/12/15 2:59 p.m.13 views

kernel: metadata validator in XFS may cause an inode with a valid, user-creatable extended attribute to be flagged as corrupt

A flaw was found in the Linux kernel. A failure of the file system metadata validator in XFS can cause an inode with a valid, user-creatable extended attribute to be flagged as corrupt. This can lead to the filesystem being shutdown, or otherwise rendered inaccessible until it is remounted, leadi...

5.5CVSS7AI score0.00416EPSS
SaveExploits0References5
Veracode
Veracode
added 2020/12/06 4:28 a.m.25 views

Information Disclosure

chromium is vulnerable to information disclosure. Use of extended attributes in downloads allows a local attacker to read download URLs via the filesystem...

5.5CVSS3.6AI score0.00254EPSS
SaveExploits0References4Affected Software1
UbuntuCve
UbuntuCve
added 2020/11/30 12:00 a.m.50 views

CVE-2020-27815

A flaw was found in the JFS filesystem code in the Linux Kernel which allows a local attacker with the ability to set extended attributes to panic the system, causing memory corruption or escalating privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well a...

7.8CVSS6.7AI score0.00788EPSS
SaveExploits1References7
OSV
OSV
added 2020/11/30 12:00 a.m.9 views

UBUNTU-CVE-2020-27815

A flaw was found in the JFS filesystem code in the Linux Kernel which allows a local attacker with the ability to set extended attributes to panic the system, causing memory corruption or escalating privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well a...

7.8CVSS6.6AI score0.00788EPSS
SaveExploits1References8
RedHat Linux
RedHat Linux
added 2020/11/24 10:06 a.m.10 views

kernel: metadata validator in XFS may cause an inode with a valid, user-creatable extended attribute to be flagged as corrupt

A flaw was found in the Linux kernel. A failure of the file system metadata validator in XFS can cause an inode with a valid, user-creatable extended attribute to be flagged as corrupt. This can lead to the filesystem being shutdown, or otherwise rendered inaccessible until it is remounted, leadi...

5.5CVSS7AI score0.00416EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2020/11/11 12:00 a.m.14 views

PT-2020-16802 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: A flaw was found in the JFS filesystem code, allowing a local attacker with the ability to set extended attributes to panic the system, causing memory corruption or escalating...

9.8CVSS7.5AI score0.27477EPSS
SaveExploits42References778
RedHat Linux
RedHat Linux
added 2020/10/26 11:16 a.m.13 views

kernel: metadata validator in XFS may cause an inode with a valid, user-creatable extended attribute to be flagged as corrupt

A flaw was found in the Linux kernel. A failure of the file system metadata validator in XFS can cause an inode with a valid, user-creatable extended attribute to be flagged as corrupt. This can lead to the filesystem being shutdown, or otherwise rendered inaccessible until it is remounted, leadi...

5.5CVSS7AI score0.00416EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2020/10/20 8:52 a.m.11 views

kernel: metadata validator in XFS may cause an inode with a valid, user-creatable extended attribute to be flagged as corrupt

A flaw was found in the Linux kernel. A failure of the file system metadata validator in XFS can cause an inode with a valid, user-creatable extended attribute to be flagged as corrupt. This can lead to the filesystem being shutdown, or otherwise rendered inaccessible until it is remounted, leadi...

5.5CVSS7AI score0.00416EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2020/10/20 8:41 a.m.12 views

kernel: metadata validator in XFS may cause an inode with a valid, user-creatable extended attribute to be flagged as corrupt

A flaw was found in the Linux kernel. A failure of the file system metadata validator in XFS can cause an inode with a valid, user-creatable extended attribute to be flagged as corrupt. This can lead to the filesystem being shutdown, or otherwise rendered inaccessible until it is remounted, leadi...

5.5CVSS7AI score0.00416EPSS
SaveExploits0References5
Rows per page
Query Builder