Red Hat LVM2 Memory Corruption Vulnerability

LVM2 is an open source logical volume manager. A security vulnerability in vglookup in the daemons/lvmetad/lvmetad-core.c file in Red Hat LVM2 version 2.02 stems from the program failing to properly manage memory. An attacker could exploit this vulnerability to disclose lvmetad memory...

CVE-2020-8991

vglookup in daemons/lvmetad/lvmetad-core.c in LVM2 2.02 mismanages memory, leading to an lvmetad memory leak, as demonstrated by running pvs. NOTE: RedHat disputes CVE-2020-8991 as not being a vulnerability since there’s no apparent route to either privilege escalation or to denial of service...

DEBIAN-CVE-2020-8991

vglookup in daemons/lvmetad/lvmetad-core.c in LVM2 2.02 mismanages memory, leading to an lvmetad memory leak, as demonstrated by running pvs. NOTE: RedHat disputes CVE-2020-8991 as not being a vulnerability since there’s no apparent route to either privilege escalation or to denial of service...

CVE-2020-8991

vglookup in daemons/lvmetad/lvmetad-core.c in LVM2 2.02 mismanages memory, leading to an lvmetad memory leak, as demonstrated by running pvs. NOTE: RedHat disputes CVE-2020-8991 as not being a vulnerability since there’s no apparent route to either privilege escalation or to denial of service...

CVE-2020-8991

vglookup in daemons/lvmetad/lvmetad-core.c in LVM2 2.02 mismanages memory, leading to an lvmetad memory leak, as demonstrated by running pvs. NOTE: RedHat disputes CVE-2020-8991 as not being a vulnerability since there’s no apparent route to either privilege escalation or to denial of service...

Design/Logic Flaw

vglookup in daemons/lvmetad/lvmetad-core.c in LVM2 2.02 mismanages memory, leading to an lvmetad memory leak, as demonstrated by running pvs. NOTE: RedHat disputes CVE-2020-8991 as not being a vulnerability since there’s no apparent route to either privilege escalation or to denial of service...

CVE-2020-8991

vglookup in daemons/lvmetad/lvmetad-core.c in LVM2 2.02 mismanages memory, leading to an lvmetad memory leak, as demonstrated by running pvs. NOTE: RedHat disputes CVE-2020-8991 as not being a vulnerability since there’s no apparent route to either privilege escalation or to denial of service...

CVE-2020-8991

vglookup in daemons/lvmetad/lvmetad-core.c in LVM2 2.02 mismanages memory, leading to an lvmetad memory leak, as demonstrated by running pvs. NOTE: RedHat disputes CVE-2020-8991 as not being a vulnerability since there’s no apparent route to either privilege escalation or to denial of service...

PT-2020-20414 · Linux · Lvm2

Name of the Vulnerable Software and Affected Versions: LVM2 version 2.02 Description: The issue is related to memory mismanagement in the vg lookup function in daemons/lvmetad/lvmetad-core.c, leading to a memory leak in lvmetad. This can be demonstrated by running the pvs command. Recommendations...