1205 matches found
kernel: udf: Fix NULL pointer dereference in udf_symlink function
A vulnerability was found in the Linux kernel's UDF file system driver, where the udfsymlink function can dereference a NULL pointer. This occurs because the function uses a value returned from udftgetblk without checking if it is NULL, potentially causing system crashes if sbgetblk fails...
PT-2024-29855
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.50 Description The issue is related to the udf component of the Linux kernel, where a corrupted block bitmap buffer can cause mixed results during allocation, potentially leading to privilege escalation. The...
PT-2024-32192
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.52 Description The issue concerns the Linux kernel, where a vulnerability has been resolved related to the udf filesystem. The problem arises when mounting filesystems where the partition would overflow the...
PT-2024-30705
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a bogus checksum computation in the udf rename function when updating the checksum of the '..' directory entry of a moved directory. This occurs because the...
Fedora: Security Advisory (FEDORA-2024-07342adb87)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
IBM DB2 Multiple Vulnerabilities (7145722, 7145730) (Unix)
According to its self-reported version number, IBM Db2 on Unix may be affected by multiple vulnerabilites: - IBM® Db2® is vulnerable to denial of service when quering a specific UDF built-in function concurrently. CVE-2023-52296 - IBM® Db2® is vulnerable to a denial of service with a speciall...
UBUNTU-CVE-2024-5480
A vulnerability in the PyTorch's torch.distributed.rpc framework, specifically in versions prior to 2.2.2, allows for remote code execution RCE. The framework, which is used in distributed training scenarios, does not properly verify the functions being called during RPC Remote Procedure Call...
SUSE CVE-2021-47353
In the Linux kernel, the following vulnerability has been resolved: udf: Fix NULL pointer dereference in udfsymlink function In function udfsymlink, epos.bh is assigned with the value returned by udftgetblk. The function udftgetblk is defined in udf/misc.c and returns the value of sbgetblk functi...
CVE-2021-47353
In the Linux kernel, the following vulnerability has been resolved: udf: Fix NULL pointer dereference in udfsymlink function In function udfsymlink, epos.bh is assigned with the value returned by udftgetblk. The function udftgetblk is defined in udf/misc.c and returns the value of sbgetblk functi...
CVE-2021-47353
In the Linux kernel, the following vulnerability has been resolved: udf: Fix NULL pointer dereference in udfsymlink function In function udfsymlink, epos.bh is assigned with the value returned by udftgetblk. The function udftgetblk is defined in udf/misc.c and returns the value of sbgetblk functi...
DEBIAN-CVE-2021-47353
In the Linux kernel, the following vulnerability has been resolved: udf: Fix NULL pointer dereference in udfsymlink function In function udfsymlink, epos.bh is assigned with the value returned by udftgetblk. The function udftgetblk is defined in udf/misc.c and returns the value of sbgetblk functi...
CVE-2021-47353
In the Linux kernel, the following vulnerability has been resolved: udf: Fix NULL pointer dereference in udfsymlink function In function udfsymlink, epos.bh is assigned with the value returned by udftgetblk. The function udftgetblk is defined in udf/misc.c and returns the value of sbgetblk functi...
CVE-2021-47353
CVE-2021-47353 in the Linux kernel fixes a NULL pointer dereference in the udf_symlink function. The issue arises when udf_tgetblk returns a NULL sb_getblk value and the code uses epos.bh without checking, leading to a possible crash. The fix adds a NULL check for epos.bh before use, mitigating p...
CVE-2021-47353 udf: Fix NULL pointer dereference in udf_symlink function
In the Linux kernel, the following vulnerability has been resolved: udf: Fix NULL pointer dereference in udfsymlink function In function udfsymlink, epos.bh is assigned with the value returned by udftgetblk. The function udftgetblk is defined in udf/misc.c and returns the value of sbgetblk functi...
CVE-2021-47353: NULL Pointer Dereference
In the Linux kernel, the following vulnerability has been resolved: udf: Fix NULL pointer dereference in udfsymlink function In function udfsymlink, epos.bh is assigned with the value returned by udftgetblk. The function udftgetblk is defined in udf/misc.c and returns the value of sbgetblk functi...
PT-2024-4327 · Apple · Macos Sonoma +1
Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.5 Description: The issue allows an app to execute arbitrary code with kernel privileges. It is related to a buffer overflow in the IOAESAccelerator component of the UDF file system in Mac OS, which can be...
edk2:TestUdf: Heap-buffer-overflow in GetAedAdsOffset
Project: https://github.com/tianocore/edk2.git Detailed Report: https://oss-fuzz.com/testcase?key=5215348423983104 Project: edk2 Fuzzing Engine: libFuzzer Fuzz Target: TestUdf Job Type: libfuzzerasanedk2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x502000000091 Cras...
edk2:TestUdf: Heap-buffer-overflow in AllocateCopyPool
Detailed Report: https://oss-fuzz.com/testcase?key=6077873782849536 Project: edk2 Fuzzing Engine: libFuzzer Fuzz Target: TestUdf Job Type: libfuzzerasanedk2 Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x51200000077c Crash State: AllocateCopyPool InternalFindFile FindFi...
edk2:TestUdf: Stack-buffer-underflow in MangleFileName
Project: https://github.com/tianocore/edk2.git Detailed Report: https://oss-fuzz.com/testcase?key=6227019112185856 Project: edk2 Fuzzing Engine: libFuzzer Fuzz Target: TestUdf Job Type: libfuzzerasanedk2 Platform Id: linux Crash Type: Stack-buffer-underflow READ 2 Crash Address: 0x7aa350d0281e...