CVE-2019-20430

In the Lustre file system before 2.12.3, the mdt module has an LBUG panic via a large MDT Body eadatasize field due to the lack of validation for specific fields of packets sent by a client...

EUVD-2019-10978

Malware in sbrugna...

EUVD-2019-10980

Malware in sbrugna...

Lustre mdt module buffer overflow vulnerability

Lustre is a parallel distributed file system typically used in large computer clusters and supercomputers, of which Lustre mdt is a module. A buffer overflow vulnerability exists in the Lustre mdt module. The vulnerability stems from a networked system or product performing operations in memory...

CVE-2019-20430

In the Lustre file system before 2.12.3, the mdt module has an LBUG panic via a large MDT Body eadatasize field due to the lack of validation for specific fields of packets sent by a client...

CVE-2019-20430

In the Lustre file system before 2.12.3, the mdt module has an LBUG panic via a large MDT Body eadatasize field due to the lack of validation for specific fields of packets sent by a client...

Out-of-bounds

In the Lustre file system before 2.12.3, the mdt module has an out-of-bounds access and panic due to the lack of validation for specific fields of packets sent by a client. mdtfilesecctxunpack does not validate the value of namesize derived from reqcapsulegetsize...

CVE-2019-20430

In the Lustre file system before 2.12.3, the mdt module has an LBUG panic via a large MDT Body eadatasize field due to the lack of validation for specific fields of packets sent by a client...

Null pointer dereference

In the Lustre file system before 2.12.3, mdtobjectremote in the mdt module has a NULL pointer dereference and panic due to the lack of validation for specific fields of packets sent by a client...

CVE-2019-20430

The Lustre CVE-2019-20430 affects the mdt module in Lustre before version 2.12.3. The vulnerability is an LBUG panic triggered by a large MDT Body eadatasize field, caused by lack of validation for specific fields in client packets. The Red Hat and other databases echo the same description. Docum...

CVE-2019-20432

In the Lustre file system before 2.12.3, the mdt module has an out-of-bounds access and panic due to the lack of validation for specific fields of packets sent by a client. mdtfilesecctxunpack does not validate the value of namesize derived from reqcapsulegetsize...

CVE-2019-20424: NULL Pointer Dereference

In the Lustre file system before 2.12.3, mdtobjectremote in the mdt module has a NULL pointer dereference and panic due to the lack of validation for specific fields of packets sent by a client...

CVE-2019-20432: Out-of-bounds Write

In the Lustre file system before 2.12.3, the mdt module has an out-of-bounds access and panic due to the lack of validation for specific fields of packets sent by a client. mdtfilesecctxunpack does not validate the value of namesize derived from reqcapsulegetsize...