Lucene search
+L

148 matches found

Positive Technologies
Positive Technologies
•added 2021/08/03 12:00 a.m.•1 views

PT-2021-25678

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.13.3 Description: The issue is related to a racing condition on fsync entry slab by multiple filesystem instances. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linu...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/08/03 12:00 a.m.•2 views

PT-2021-29673

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.13.3 Description The issue is related to a racing condition on fsync entry slab by multiple filesystem instances. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

5.8AI score
SaveExploits0References1
OSV
OSV
•added 2021/06/25 12:09 a.m.•24 views

UVI-2021-1000817 btrfs: fix fsync failure and transaction abort after writes to prealloc extents

btrfs: fix fsync failure and transaction abort after writes to prealloc extents This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.10 by comm...

7.2AI score
SaveExploits0
OSV
OSV
•added 2021/06/25 12:09 a.m.•26 views

GSD-2021-1000817 btrfs: fix fsync failure and transaction abort after writes to prealloc extents

btrfs: fix fsync failure and transaction abort after writes to prealloc extents This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.10 by comm...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/06/25 12:00 a.m.•2 views

PT-2021-29282

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.10 Description The issue concerns a problem with fsync failure and transaction abort after writes to prealloc extents in btrfs. The actual impact and attack plausibility have not yet been proven...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/06/25 12:00 a.m.•4 views

PT-2021-25288

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.10 Description: The issue concerns a problem with fsync failure and transaction abort after writes to prealloc extents in btrfs. The actual impact and attack plausibility have not yet been proven...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/05/31 12:00 a.m.•3 views

PT-2021-28614

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.36 Description A race condition exists between transaction aborts and fsyncs, potentially leading to a use-after-free issue. The actual impact and attack plausibility have not yet been proven. Recommendatio...

5.9AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/05/31 12:00 a.m.•1 views

PT-2021-28540

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.7 through v5.12.2 Description A race condition between transaction aborts and fsyncs can lead to a use-after-free issue. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

5.9AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/05/31 12:00 a.m.•5 views

PT-2021-24546

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.7 through v5.12.2 Description: A race condition exists between transaction aborts and fsyncs, potentially leading to a use-after-free issue. The actual impact and attack plausibility have not yet been proven...

5.9AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2020/09/09 12:00 a.m.•62 views

openSUSE Security Update : the Linux Kernel (openSUSE-2020-1382)

The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2020-14314: Fixed potential negative array index in dosplit in ext4 bsc1173798. - CVE-2020-14386: Fixed an overflow in afpacket, which could lead to local privilege...

7.8CVSS6.2AI score0.01308EPSS
SaveExploits1References44
BDU FSTEC
BDU FSTEC
•added 2020/01/29 12:00 a.m.•18 views

The vulnerability of the f2fs_recover_fsync_data function in Linux operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the f2fsrecoverfsyncdata function in Linux operating systems is related to pointer swapping errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a mounted f2fs file system...

5.5CVSS6.7AI score0.02096EPSS
SaveExploits1References15Affected Software1
CNVD
CNVD
•added 2018/09/06 12:00 a.m.•17 views

Red Hat glusterfs client denial of service vulnerability

Red Hat glusterfs server is an open source distributed file system from Red Hat Red Hat. The system is mainly for media streaming , data analysis and other data and bandwidth intensive tasks to create large-scale distributed storage solutions. A security vulnerability exists in the 'fsync2'...

6.8CVSS6.6AI score0.01881EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2018/09/04 3:29 p.m.•25 views

CVE-2018-10924

It was discovered that fsync2 system call in glusterfs client code leaks memory. An authenticated attacker could use this flaw to launch a denial of service attack by making gluster clients consume memory of the host machine...

6.8CVSS6.9AI score0.01881EPSS
SaveExploits0References5
OSV
OSV
•added 2018/09/04 3:29 p.m.•7 views

DEBIAN-CVE-2018-10924

It was discovered that fsync2 system call in glusterfs client code leaks memory. An authenticated attacker could use this flaw to launch a denial of service attack by making gluster clients consume memory of the host machine...

6.5CVSS8.5AI score0.01881EPSS
SaveExploits0References1
OSV
OSV
•added 2018/09/04 3:29 p.m.•10 views

UBUNTU-CVE-2018-10924

It was discovered that fsync2 system call in glusterfs client code leaks memory. An authenticated attacker could use this flaw to launch a denial of service attack by making gluster clients consume memory of the host machine...

6.5CVSS6.8AI score0.01881EPSS
SaveExploits0References6
NVD
NVD
•added 2018/09/04 3:29 p.m.•44 views

CVE-2018-10924

It was discovered that fsync2 system call in glusterfs client code leaks memory. An authenticated attacker could use this flaw to launch a denial of service attack by making gluster clients consume memory of the host machine...

6.8CVSS5.9AI score0.01881EPSS
SaveExploits0References4
OSV
OSV
•added 2018/09/04 3:29 p.m.•30 views

CVE-2018-10924

It was discovered that fsync2 system call in glusterfs client code leaks memory. An authenticated attacker could use this flaw to launch a denial of service attack by making gluster clients consume memory of the host machine...

6.5CVSS6.5AI score
SaveExploits0References4
Mend
Mend
•added 2018/09/04 3:00 p.m.•2 views

CVE-2018-10924

It was discovered that fsync2 system call in glusterfs client code leaks memory. An authenticated attacker could use this flaw to launch a denial of service attack by making gluster clients consume memory of the host machine...

6.9CVSS0.01881EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2018/09/04 3:00 p.m.•60 views

CVE-2018-10924

It was discovered that fsync2 system call in glusterfs client code leaks memory. An authenticated attacker could use this flaw to launch a denial of service attack by making gluster clients consume memory of the host machine...

6.8CVSS6.7AI score0.01881EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/09/04 12:00 a.m.•6 views

CVE-2018-10924: Uncontrolled Resource Consumption

It was discovered that fsync2 system call in glusterfs client code leaks memory. An authenticated attacker could use this flaw to launch a denial of service attack by making gluster clients consume memory of the host machine...

6.8CVSS6.8AI score0.01881EPSS
SaveExploits0References3
Rows per page
Query Builder