100 matches found
SUSE CVE-2020-6107
An exploitable information disclosure vulnerability exists in the devread functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause an uninitialized read resulting in an information disclosure. An attacker can provide a malicious file to trigger this vulnerability...
SUSE CVE-2020-6108
An exploitable code execution vulnerability exists in the fsckchkorphannode functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause a heap buffer overflow resulting in a code execution. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2020-6105
An exploitable code execution vulnerability exists in the multiple devices functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause Information overwrite resulting in a code execution. An attacker can provide a malicious file to trigger this vulnerability...
Mageia: Security Advisory (MGASA-2020-0436)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability of the F2fs-Tools utility, related to incorrect external manipulation of file names or file paths, allows a malicious user to delete any files they desire.
The vulnerability of the F2fs-Tools tool is related to improper external manipulation of the file name or file path. Exploiting this vulnerability allows an attacker to delete arbitrary files by creating a specially crafted file system called f2fs...
The vulnerability of the F2fs-Tools tool, related to reading beyond the memory boundaries, allows a intruder to access confidential information.
The vulnerability of the F2fs-Tools tool is related to reading data beyond the memory boundaries. Exploiting this vulnerability can allow an attacker to access confidential information by using a specially created file system called f2fs, causing a read error beyond the allowed range...
The vulnerability of the F2fs-Tools tool, related to the ability to disclose information, allows a violator to gain access to confidential information.
The vulnerability of the F2fs-Tools tool is related to the exposure of confidential information. Exploiting this vulnerability could allow an attacker to gain access to confidential information through a specially created file system called f2fs...
Arbitrary Code Execution
f2fs-tools is vulnerable to arbitrary code execution. An exploitable code execution vulnerability exists in the fsckchkorphannode functionality allows an attacker to execute arbitrary code on the host OS via heap-based buffer overflow using a malicious f2fs file...
Remote Code Execution (RCE)
f2fs-tools, edge is vulnerable to remote code execution. A specially crafted f2fs filesystem can cause Information overwrite resulting in a code execution. An attacker can provide a malicious file to trigger this vulnerability...
Information Disclosure
f2fs-tools is vulnerable to information disclosure. An exploitable information disclosure vulnerability exists in the initnodemanager functionality. An attacker is able to obtain confidential information via a malicious file...
GLSA-202101-26 : f2fs-tools: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202101-26 f2fs-tools: Multiple vulnerabilities Multiple vulnerabilities have been discovered in f2fs-tools. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for...
f2fs-tools: Multiple vulnerabilities
Background Tools for Flash-Friendly File System F2FS. Description Multiple vulnerabilities have been discovered in f2fs-tools. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known workaround a...
Arbitrary Code Execution
f2fs-tools is vulnerable to arbitrary code execution. The vulnerability exists through the file system checking functionality where a specially crafted f2fs file can cause a logic flaw and out-of-bounds heap operations...
Information Disclosure
f2fs-tools is vulnerable to information disclosure. An attacker can inject a specially crafted filesystem in the getdnodeofdata functionality resulting in an information disclosure...
Arbitrary Code Execution
f2fs-tools is vulnerable to arbitrary code execution. An attacker is able to overwrite arbitrary files which would result in arbitrary code execution using a malicious file...
Information Disclosure
f2fs-tools is vulnerable to information disclosure. The vulnerability exists through the initnodemanager functionality where a crafted filesystem can be used to disclose information...
Information Disclosure
f2fs-tools is vulnerable to information disclosure. An attacker can inject a specially crafted filesystem in the devread functionality resulting in an information disclosure...
Arbitrary Code Execution
f2fs-tools is vulnerable to arbitrary code execution. A heap-based buffer overflow in the fsckchkorphannode functionality allows an attacker to execute arbitrary code via a malicious file...
MGASA-2020-0436 Updated f2fs-tools packages fix security vulnerability
An exploitable code execution vulnerability exists in the file system checking functionality of fsck.f2fs 1.12.0. A specially crafted f2fs file can cause a logic flaw and out-of-bounds heap operations, resulting in code execution. An attacker can provide a malicious file to trigger this...
ALPINE-CVE-2020-6104
An exploitable information disclosure vulnerability exists in the getdnodeofdata functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause information disclosure resulting in a information disclosure. An attacker can provide a malicious file to trigger this...