77 matches found
FreeBSD : FreeBSD -- Kernel stack disclosure in UFS/FFS (ff82610f-b309-11e9-a87f-a4badb2f4699)
A bug causes up to three bytes of kernel stack memory to be written to disk as uninitialized directory entry padding. This data can be viewed by any user with read access to the directory. Additionally, a malicious user with write access to a directory can cause up to 254 bytes of kernel stack...
CVE-2019-5601
In FreeBSD 12.0-STABLE before r347474, 12.0-RELEASE before 12.0-RELEASE-p7, 11.2-STABLE before r347475, and 11.2-RELEASE before 11.2-RELEASE-p11, a bug in the FFS implementation causes up to three bytes of kernel stack memory to be written to disk as uninitialized directory entry padding...
Code injection
In FreeBSD 12.0-STABLE before r347474, 12.0-RELEASE before 12.0-RELEASE-p7, 11.2-STABLE before r347475, and 11.2-RELEASE before 11.2-RELEASE-p11, a bug in the FFS implementation causes up to three bytes of kernel stack memory to be written to disk as uninitialized directory entry padding...
CVE-2019-5601
Removed by vendor...
CVE-2019-5601
In FreeBSD 12.0-STABLE before r347474, 12.0-RELEASE before 12.0-RELEASE-p7, 11.2-STABLE before r347475, and 11.2-RELEASE before 11.2-RELEASE-p11, a bug in the FFS implementation causes up to three bytes of kernel stack memory to be written to disk as uninitialized directory entry padding...
CVE-2019-5601
CVE-2019-5601 affects FreeBSD: kernel stack leakage in the UFS/FFS code. A bug in the FFS implementation can cause up to three bytes of kernel stack memory to be written to disk as uninitialized directory entry padding, potentially exposing stack data. Impact: kernel stack disclosure; attacker ac...
FreeBSD -- Kernel stack disclosure in UFS/FFS
Problem Description: A bug causes up to three bytes of kernel stack memory to be written to disk as uninitialized directory entry padding. This data can be viewed by any user with read access to the directory. Additionally, a malicious user with write access to a directory can cause up to 254 byt...
FreeBSD-SA-19:10.ufs
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-19:10.ufs Security Advisory The FreeBSD Project Topic: Kernel stack disclosure in UFS/FFS Category: core Module: Kernel Announced: 2019-07-02 Credits: David G...
DEBIAN-CVE-2016-7912
Use-after-free vulnerability in the ffsusercopyworker function in drivers/usb/gadget/function/ffs.c in the Linux kernel before 4.5.3 allows local users to gain privileges by accessing an I/O data structure after a certain callback call...
PT-2016-7427 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.5.3 Description: A use-after-free issue exists in the ffs user copy worker function, located in drivers/usb/gadget/function/f fs.c, allowing local users to gain privileges by accessing an I/O data structure...
[The Sleuth Kit] Library and collection of command line tools to investigate disk images
The Sleuth Kit is a C++ library and collection of open source file system forensics tools that allow you to, among other things, view allocated and deleted data from NTFS, FAT, FFS, EXT2, Ext3, HFS+, and ISO9660 images. The Sleuth Kit® TSK is a library and collection of command line tools that...
CVE-2002-0829
CVE-2002-0829: Integer overflow in the Berkeley Fast File System (FFS) on FreeBSD 4.6.1 RELEASE-p4 and earlier allows local users to access arbitrary file contents within FFS to gain privileges by creating a file larger than allowed by the virtual memory system. Affects FreeBSD FFS; vulnerability...
Security Advisory FreeBSD-SA-02:35.ffs
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:35.ffs Security Advisory The FreeBSD Project Topic: local users may read and write arbitrary blocks on an FFS filesystem Category: core Module: kernel Announced: 2002-08-...
FreeBSD-SA-02:35.ffs
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:35.ffs Security Advisory The FreeBSD Project Topic: local users may read and write arbitrary blocks on an FFS filesystem Category: core Module: kernel Announced:...
CVE-1999-0483
OpenBSD crash using nlink value in FFS and EXT2FS filesystems...
CVE-1999-0483
OpenBSD crash vulnerability CVE-1999-0483 affects FFS and EXT2FS filesystems. The root cause is handling an improper nlink value, leading to a crash (local, with low impact on confidentiality/integrity and partial impact on availability per CVSS). Exploitation details, affected product versions, ...