PT-2018-11001

Name of the Vulnerable Software and Affected Versions S3QL versions prior to 2.27 Description The issue is related to mishandling of checksumming, allowing replay attacks. An attacker controlling the backend can present old versions of the filesystem metadata database as up-to-date, inject...

CVE-2018-12088: Improper Input Validation

S3QL before 2.27 mishandles checksumming, and consequently allows replay attacks in which an attacker who controls the backend can present old versions of the filesystem metadata database as up-to-date, temporarily inject zero-valued bytes into files, or temporarily hide parts of files. This is...