CVE-2023-28938

CVE-2023-28938 affects Intel SSD Tools mdadm, where uncontrolled resource consumption could enable local denial of service. Multiple connected advisories confirm the issue in versions prior to mdadm-4.2-rc2 and indicate a patched release is available (e.g., mdadm >= 4.2-1). Affected platforms ...

CVE-2023-28736

The CVE-2023-28736 entry describes a buffer overflow in Intel SSD Tools mdadm before version 4.2-rc2 that could enable local privilege escalation for a privileged attacker with local access. Affected component is mdadm (Intel SSD Tools). Root cause: buffer overflow in the vulnerable toolset; impa...

CVE-2014-5220

The CVE-2014-5220 issue affects the mdadm package (mdcheck script) in openSUSE 13.2 prior to version 3.3.1-5.14.1. The root cause is improper sanitization of device names in mdcheck, enabling a local attacker to execute arbitrary commands as root. This is supported by multiple sources in the conn...