Lucene search
+L

1362 matches found

Positive Technologies
Positive Technologies
•added 2021/06/24 12:00 a.m.•2 views

PT-2021-29180

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.272 Description A bug was found in the ext4 es cache extent function, where ext4 split extent at failed. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/06/24 12:00 a.m.•1 views

PT-2021-25202

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.236 Description A bug was found in the ext4 es cache extent function, where ext4 split extent at failed. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations For...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/06/24 12:00 a.m.•3 views

PT-2021-25186

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.272 Description A bug was found in the ext4 es cache extent function, which is related to the ext4 split extent at failure. The actual impact and potential for attack have not been proven yet. Recommendation...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/06/24 12:00 a.m.•3 views

PT-2021-29188

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.272 Description A bug was found in the ext4 es cache extent function, where ext4 split extent at failed. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations For...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/06/24 12:00 a.m.•3 views

PT-2021-25194

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.272 Description A bug was found in the ext4 es cache extent function, where ext4 split extent at failed. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations For...

5.7AI score
SaveExploits0References1
Veracode
Veracode
•added 2021/06/06 10:35 a.m.•61 views

Denial Of Service (DoS)

kernel is vulnerable to denial of service. A race condition getoldroot in fs/btrfs/ctree.c allows attackers to cause a denial of service due to the lack of locking on an extent buffer before a cloning operation...

4.7CVSS6.6AI score0.00267EPSS
SaveExploits0References11Affected Software3
Positive Technologies
Positive Technologies
•added 2021/06/06 12:00 a.m.•9 views

PT-2024-11169

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A bug has been fixed in the Linux kernel's ext4 file system, specifically in the ext4 es cache extent function, which is called by ext4 split extent at. The issue occurs when running...

5.5CVSS6.6AI score0.00242EPSS
SaveExploits0
OSV
OSV
•added 2021/06/04 7:43 p.m.•14 views

UVI-2021-1000590 btrfs: return whole extents in fiemap

btrfs: return whole extents in fiemap This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.42 by commit c7e0c6047c4f2a9664e48e3671af80c513220a4...

7.2AI score
SaveExploits0
OSV
OSV
•added 2021/06/04 7:43 p.m.•19 views

UVI-2021-1000587 btrfs: release path before starting transaction when cloning inline extent

btrfs: release path before starting transaction when cloning inline extent This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.42 by commit...

7.2AI score
SaveExploits0
OSV
OSV
•added 2021/06/04 7:43 p.m.•16 views

GSD-2021-1000587 btrfs: release path before starting transaction when cloning inline extent

btrfs: release path before starting transaction when cloning inline extent This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.42 by commit...

7.2AI score
SaveExploits0
OSV
OSV
•added 2021/06/04 7:35 p.m.•17 views

UVI-2021-1000539 btrfs: release path before starting transaction when cloning inline extent

btrfs: release path before starting transaction when cloning inline extent This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.9 by commit...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/06/04 12:00 a.m.•0 views

PT-2021-25010

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.9 Description: The issue is related to the btrfs filesystem, where a release path is not properly handled before starting a transaction when cloning an inline extent. This could potentially lead to securit...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/06/04 12:00 a.m.•2 views

PT-2021-29004

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.9 Description The issue is related to the btrfs filesystem, where a release path is not properly handled before starting a transaction when cloning an inline extent. This could potentially lead to security...

5.7AI score
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2021/05/18 3:49 p.m.•11 views

kernel: integer overflow in ext4_es_cache_extent

A flaw was found in the Linux kernel. A denial of service problem is identified if an extent tree is corrupted in a crafted ext4 filesystem in fs/ext4/extents.c in ext4escacheextent. Fabricating an integer overflow, A local attacker with a special user privilege may cause a system crash problem...

5.5CVSS6.6AI score0.00301EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2021/05/14 12:00 a.m.•14 views

PT-2021-8270

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the hfsplus file truncate function in the Linux kernel, which can cause corruption and data loss when shrinking truncate happens to the middle of an extent record...

7.1CVSS6.5AI score0.00242EPSS
SaveExploits0References205
Positive Technologies
Positive Technologies
•added 2021/05/06 12:00 a.m.•34 views

PT-2021-1526 · Linux +6 · Linux Kernel +6

Name of the Vulnerable Software and Affected Versions: linux kernel affected versions not specified Description: A vulnerability in the linux kernel allows for an information leak. This issue is related to the ext4 extent header and can lead to the disclosure of protected information to userspace...

9.8CVSS6.7AI score0.92795EPSS
SaveExploits329References1476
OSV
OSV
•added 2021/04/13 3:23 p.m.•30 views

USN-4907-1 linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-dell300x, linux-gcp, linux-gcp-4.15, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities

Wen Xu discovered that the xfs file system implementation in the Linux kernel did not properly validate the number of extents in an inode. An attacker could use this to construct a malicious xfs image that, when mounted, could cause a denial of service system crash. CVE-2018-13095 It was discover...

7.8CVSS7.1AI score0.01534EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2021/03/31 12:00 a.m.•19 views

Linux kernel 输入验证错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which can be exploited by an attacker to trigger an integer overflow via ext4 es cache extent, which triggers a denial of...

5.5CVSS6.4AI score0.00301EPSS
SaveExploits0References21
Microsoft CVE
Microsoft CVE
•added 2021/03/26 7:00 a.m.•9 views

A race condition was discovered in get_old_root in fs/btrfs/ctree.c in the Linux kernel through 5.11.8. It allows attackers to cause a denial of service (BUG) because of a lack of locking on an extent buffer before a cloning operation aka CID-dbcc7d57bffc.

...

4.7CVSS6.7AI score0.00267EPSS
SaveExploits0
OSV
OSV
•added 2021/03/22 9:15 a.m.•5 views

DEBIAN-CVE-2021-28964

A race condition was discovered in getoldroot in fs/btrfs/ctree.c in the Linux kernel through 5.11.8. It allows attackers to cause a denial of service BUG because of a lack of locking on an extent buffer before a cloning operation, aka CID-dbcc7d57bffc...

4.7CVSS6.6AI score0.00267EPSS
SaveExploits0References1
Rows per page
Query Builder