575 matches found
PT-2024-41636
Уязвимость функции truncate node модуля fs/f2fs/node.c поддержки файловой системы F2FS ядра операционной системы Linux связана с недостаточной проверкой исключительных состояний. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
DEBIAN-CVE-2024-50015
In the Linux kernel, the following vulnerability has been resolved: ext4: dax: fix overflowing extents beyond inode size when partially writing The daxiomaprw does two things in each iteration: map written blocks and copy user data to blocks. If the process is killed by userSee signal handling in...
UBUNTU-CVE-2024-50015
In the Linux kernel, the following vulnerability has been resolved: ext4: dax: fix overflowing extents beyond inode size when partially writing The daxiomaprw does two things in each iteration: map written blocks and copy user data to blocks. If the process is killed by userSee signal handling in...
PT-2024-34052
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.61 Description: A vulnerability has been resolved in the Linux kernel. The issue is related to the ocfs2 file system, where passing a u64 value to ocfs2 truncate inline may cause an overflow. This is due to...
kernel: ftruncate: pass a signed offset
An unexpected file truncate flaw was found when opening files with specific parameters in the Linux kernel's file-system. This vulnerability allows a local user to corrupt specific files when having access to these files...
kernel: block: Fix wrong offset in bio_truncate()
In the Linux kernel, the following vulnerability has been resolved: block: Fix wrong offset in biotruncate biotruncate clears the buffer outside of last block of bdev, however current biotruncate is using the wrong offset of page. So it can return the uninitialized data. This happened when both o...
kernel: block: Fix wrong offset in bio_truncate()
In the Linux kernel, the following vulnerability has been resolved: block: Fix wrong offset in biotruncate biotruncate clears the buffer outside of last block of bdev, however current biotruncate is using the wrong offset of page. So it can return the uninitialized data. This happened when both o...
CVE-2024-42084: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: ftruncate: pass a signed offset The old ftruncate syscall, using the 32-bit offt misses a sign extension when called in compat mode on 64-bit architectures. As a result, passing a negative length accidentally succeeds in truncati...
CVE-2024-21731
Improper handling of input could lead to an XSS vector in the StringHelper::truncate method...
CVE-2024-21731
Improper handling of input could lead to an XSS vector in the StringHelper::truncate method...
CVE-2024-21731
CVE-2024-21731 concerns Joomla core: StringHelper::truncate allows improper input handling that can enable an XSS vector. Multiple connected sources (NVD, OSV, Red Hat, JOOMLA advisories) confirm the issue as a core XSS vulnerability affecting Joomla versions exposed in the references. The root c...
CVE-2024-21731: Improper Neutralization of Input During Web Page Generation
Improper handling of input could lead to an XSS vector in the StringHelper::truncate method...
CVE-2024-33847 f2fs: compress: don't allow unaligned truncation on released compress inode
In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: don't allow unaligned truncation on released compress inode f2fs image may be corrupted after below testcase: - mkfs.f2fs -O extraattr,compression -f /dev/vdb - mount /dev/vdb /mnt/f2fs - touch /mnt/f2fs/file -...
SUSE CVE-2022-48747
In the Linux kernel, the following vulnerability has been resolved: block: Fix wrong offset in biotruncate biotruncate clears the buffer outside of last block of bdev, however current biotruncate is using the wrong offset of page. So it can return the uninitialized data. This happened when both o...
CVE-2022-48747
In the Linux kernel, the following vulnerability has been resolved: block: Fix wrong offset in biotruncate biotruncate clears the buffer outside of last block of bdev, however current biotruncate is using the wrong offset of page. So it can return the uninitialized data. This happened when both o...
Linux kernel security vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from an incorrect offset in the block module biotruncate...
PT-2024-9257
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the bio truncate function in the Linux kernel, which clears the buffer outside of the last block of a block device. However, the function is using the wrong...
PT-2024-30716
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a bug in the f2fs file system, where the inode.i crypt info is not initialized during the mount process, leading to a kernel NULL pointer dereference. This occurs...
Joomla core 3.0.0-3.10.15-elts,4.0.0-4.4.5,5.0.0-5.1.1 - Unauthenticated XSS in StringHelper::truncate method vulnerability
Unauthenticated XSS in StringHelper::truncate method vulnerability discovered by ? in WordPress Core Joomla versions 3.0.0-3.10.15-elts,4.0.0-4.4.5,5.0.0-5.1.1...
