CVE-2018-14617: NULL Pointer Dereference

An issue was discovered in the Linux kernel through 4.17.10. There is a NULL pointer dereference and panic in hfspluslookup in fs/hfsplus/dir.c when opening a file that is purportedly a hard link in an hfs+ filesystem that has malformed catalog data, and is mounted read-only without a metadata...

CVE-2018-14610: Out-of-bounds Read

An issue was discovered in the Linux kernel through 4.17.10. There is out-of-bounds access in writeextentbuffer when mounting and operating a crafted btrfs image, because of a lack of verification that each block group has a corresponding chunk at mount time, within btrfsreadblockgroups in...

CVE-2018-10882: Out-of-bounds Write

A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bound write in in fs/jbd2/transaction.c code, a denial of service, and a system crash by unmounting a crafted ext4 filesystem image...

CVE-2018-14616: NULL Pointer Dereference

An issue was discovered in the Linux kernel through 4.17.10. There is a NULL pointer dereference in fscryptdopagecrypto in fs/crypto/crypto.c when operating on a file in a corrupted f2fs image...

CVE-2018-14611: Use After Free

An issue was discovered in the Linux kernel through 4.17.10. There is a use-after-free in trymergefreespace when mounting a crafted btrfs image, because of a lack of chunk type flag checks in btrfscheckchunkvalid in fs/btrfs/volumes.c...

CVE-2018-14614: NULL Pointer Dereference

An issue was discovered in the Linux kernel through 4.17.10. There is an out-of-bounds access in removedirtysegment in fs/f2fs/segment.c when mounting an f2fs image...

PT-2018-12615

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.17.11 Description An issue exists in the Linux kernel where there is an invalid pointer dereference in the del reloc root function in fs/btrfs/relocation.c. This occurs when mounting a crafted btrfs image and i...

PT-2018-12617

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.17.10 Description A buffer overflow issue exists in the Linux kernel due to a negative length value in the truncate inline inode function, located in fs/f2fs/inline.c, when umounting an f2fs image...

PT-2018-2899

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.17.11 Description The issue is related to a NULL pointer dereference and panic in the hfsplus lookup function in fs/hfsplus/dir.c when opening a file in an hfs+ filesystem with malformed catalog data, mounted...

PT-2018-3518

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.17.10 Description: The issue is related to an invalid pointer dereference in the io ctl map page function when mounting and operating a crafted btrfs image. This is due to a lack of block group item validation...

PT-2018-3519

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.17.11 Description: The issue is related to an invalid pointer dereference in the btrfs root node function when mounting a crafted btrfs image. This is due to a lack of chunk block group mapping validation in...

PT-2018-3517

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 4.17.10 Description: The issue is related to the remove dirty segment function in the Linux kernel, which is associated with a null pointer dereference. Exploitation of this issue may allow an attacker to cause a...

PT-2018-3520

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.17.10 Description: The issue is related to a use-after-free error in the try merge free space function of the Linux kernel, specifically when mounting a crafted btrfs image. This occurs due to a lack of chunk...

CVE-2018-10840: Heap-based Buffer Overflow

Linux kernel is vulnerable to a heap-based buffer overflow in the fs/ext4/xattr.c:ext4xattrsetentry function. An attacker could exploit this by operating on a mounted crafted ext4 image...

CVE-2018-14043

CVE-2018-14043 affects mstdlib (M Standard Library for C) 1.2.0. The issue arises when M_fs_perms_can_access attempts to delete an existing file that lacks public read/write access during a copy operation, related to fs/m_fs.c and fs/m_fs_path.c. An attacker could create the file and then gain ac...

CVE-2018-14043

mstdlib aka the M Standard Library for C 1.2.0 has incorrect file access control in situations where Mfspermscanaccess attempts to delete an existing file that lacks public read/write access during a copy operation, related to fs/mfs.c and fs/mfspath.c. An attacker could create the file and then...

PT-2018-12297

Name of the Vulnerable Software and Affected Versions mstdlib version 1.2.0 Description The issue is related to incorrect file access control in mstdlib, specifically when the function attempts to delete an existing file without public read/write access during a copy operation. This is tied to th...

CVE-2018-14043: Incorrect Permission Assignment for Critical Resource

mstdlib aka the M Standard Library for C 1.2.0 has incorrect file access control in situations where Mfspermscanaccess attempts to delete an existing file that lacks public read/write access during a copy operation, related to fs/mfs.c and fs/mfspath.c. An attacker could create the file and then...

CVE-2018-8326

A cross-site-scripting XSS vulnerability exists when an open source customization for Microsoft Active Directory Federation Services AD FS does not properly sanitize a specially crafted web request to an affected AD FS server, aka "Open Source Customization for Active Directory Federation Service...

CVE-2018-8326: Improper Neutralization of Input During Web Page Generation

A cross-site-scripting XSS vulnerability exists when an open source customization for Microsoft Active Directory Federation Services AD FS does not properly sanitize a specially crafted web request to an affected AD FS server, aka "Open Source Customization for Active Directory Federation Service...