PT-2022-37887

Уязвимость функции cifs readahead модуля fs/cifs/file.c файловой системы ядра операционной системы Linux связана с неправильным освобождением памяти «утечка памяти». Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

[SECURITY] Fedora 35 Update: golang-github-sophaskins-efs2tar-0-0.4.20210317git4db1b0f.fc35

efs2tar is a tool that converts SGI EFS-formatted filesystem images ie, the result of dd-ing a whole device in to a file in to tarballs. It was based entirely on NetBSD's sys/fs/efs...

CVE-2022-30630

A flaw was found in the golang standard library, io/fs. Calling Glob on a path that contains a large number of path separators can cause a panic issue due to stack exhaustion. This could allow an attacker to impact availability...

CVE-2022-32074

A stored cross-site scripting XSS vulnerability in the component audit/class.audit.php of osTicket-plugins - Storage-FS before commit a7842d494889fd5533d13deb3c6a7789768795ae allows attackers to execute arbitrary web scripts or HTML via a crafted SVG file...

CVE-2022-32074

A stored cross-site scripting XSS vulnerability in the component audit/class.audit.php of osTicket-plugins - Storage-FS before commit a7842d494889fd5533d13deb3c6a7789768795ae allows attackers to execute arbitrary web scripts or HTML via a crafted SVG file...

CVE-2022-32074

A stored cross-site scripting XSS vulnerability in the component audit/class.audit.php of osTicket-plugins - Storage-FS before commit a7842d494889fd5533d13deb3c6a7789768795ae allows attackers to execute arbitrary web scripts or HTML via a crafted SVG file...

PT-2022-21088

Name of the Vulnerable Software and Affected Versions osTicket-plugins - Storage-FS versions before commit a7842d494889fd5533d13deb3c6a7789768795ae Description A stored cross-site scripting XSS issue in the component audit/class.audit.php allows attackers to execute arbitrary web scripts or HTML...

CVE-2022-32074: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the component audit/class.audit.php of osTicket-plugins - Storage-FS before commit a7842d494889fd5533d13deb3c6a7789768795ae allows attackers to execute arbitrary web scripts or HTML via a crafted SVG file...

go -- multiple vulnerabilities

The Go project reports: net/http: improper sanitization of Transfer-Encoding header The HTTP/1 client accepted some invalid Transfer-Encoding headers as indicating a "chunked" encoding. This could potentially allow for request smuggling, but only if combined with an intermediate server that also...

PT-2022-20220

Name of the Vulnerable Software and Affected Versions Go versions prior to 1.17.12 Go versions prior to 1.18.4 Description The issue is related to uncontrolled recursion in Glob in io/fs, which allows an attacker to cause a panic due to stack exhaustion. This can be achieved by providing a path...

PT-2022-37878

Уязвимость функций btrfs split delalloc extent и btrfs merge delalloc extent модуля fs/btrfs/inode.c файловой системы btrfs ядра операционной системы Linux связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2022-38103

Уязвимость функции fscache perform lookup модуля fs/fscache/cookie.c поддержки файловой системы ядра операционной системы Linux связана с ошибками управления состоянием. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2025-25983

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.18.0-rc3-syzkaller-00016-gb253435746d9 Description A NULL pointer dereference issue has been identified in the Linux kernel, specifically in the fs/ntfs3 component. This issue occurs when the ntfs fill super...

GSD-2022-1003843 fs-writeback: writeback_sb_inodes：Recalculate 'wrote' according skipped pages

fs-writeback: writebacksbinodes：Recalculate 'wrote' according skipped pages This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.247 by commit...

GSD-2022-1003503 fs-writeback: writeback_sb_inodes：Recalculate 'wrote' according skipped pages

fs-writeback: writebacksbinodes：Recalculate 'wrote' according skipped pages This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.121 by commit...

GSD-2022-1003450 fs/ntfs3: validate BOOT sectors_per_clusters

fs/ntfs3: validate BOOT sectorsperclusters This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.45 by commit...

GSD-2022-1003446 fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'

fs/ntfs3: Fix some memory leaks in an error handling path of 'logreplay' This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

GSD-2022-1003243 fs-writeback: writeback_sb_inodes：Recalculate 'wrote' according skipped pages

fs-writeback: writebacksbinodes：Recalculate 'wrote' according skipped pages This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

GSD-2022-1003177 fs/ntfs3: validate BOOT sectors_per_clusters

fs/ntfs3: validate BOOT sectorsperclusters This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.13 by commit...

GSD-2022-1002938 fs-writeback: writeback_sb_inodes：Recalculate 'wrote' according skipped pages

fs-writeback: writebacksbinodes：Recalculate 'wrote' according skipped pages This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...