Search CVE reports
1001 – 1010 of 47985 results
A stack overflow vulnerability was found in gfs2-utils. The metadata walk code in metawalk.c uses alloca() with an untrusted inode height value from on-disk metadata without bounds validation, causing stack exhaustion and a denial...
1 affected package
gfs2-utils
| Package | 20.04 LTS |
|---|---|
| gfs2-utils | Needs evaluation |
A heap out-of-bounds read vulnerability was found in gfs2-utils. The ea_num_ptrs field from on-disk extended attribute metadata is consumed without bounds validation, causing a heap buffer over-read that may disclose sensitive...
1 affected package
gfs2-utils
| Package | 20.04 LTS |
|---|---|
| gfs2-utils | Needs evaluation |
A stack out-of-bounds write vulnerability was found in gfs2-utils. In savemeta, the height value from on-disk inode metadata is used as a loop bound without bounds checking, causing a stack buffer overflow that may lead to...
1 affected package
gfs2-utils
| Package | 20.04 LTS |
|---|---|
| gfs2-utils | Needs evaluation |
A stack out-of-bounds write vulnerability was found in gfs2-utils. In gfs2_edit, the di_height field from on-disk inode metadata is used as an array index without bounds checking, causing a stack buffer overflow that may lead to...
1 affected package
gfs2-utils
| Package | 20.04 LTS |
|---|---|
| gfs2-utils | Needs evaluation |
A stack overflow vulnerability was found in gfs2-utils. The hash table traversal code in metawalk.c uses alloca() with an exponentially-derived size from the untrusted on-disk di_depth field without bounds validation. A crafted...
1 affected package
gfs2-utils
| Package | 20.04 LTS |
|---|---|
| gfs2-utils | Needs evaluation |
A flaw was found in rpmuncompress. This command injection vulnerability allows a local attacker to execute arbitrary commands. This occurs when rpmuncompress processes a specially crafted archive filename containing shell...
1 affected package
rpm
| Package | 20.04 LTS |
|---|---|
| rpm | Needs evaluation |
A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename of a tarball processed by `rpmbuild -t*` to include shell metacharacters. This is particularly relevant in...
1 affected package
rpm
| Package | 20.04 LTS |
|---|---|
| rpm | Needs evaluation |
util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit...
1 affected package
util-linux
| Package | 20.04 LTS |
|---|---|
| util-linux | Needs evaluation |
Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established...
10 affected packages
golang-1.17, golang-1.20, golang-1.21, golang-1.22, golang-1.23...
| Package | 20.04 LTS |
|---|---|
| golang-1.17 | — |
| golang-1.20 | Needs evaluation |
| golang-1.21 | Needs evaluation |
| golang-1.22 | Needs evaluation |
| golang-1.23 | — |
| golang-1.24 | — |
| golang-1.25 | — |
| golang-1.26 | — |
| golang-1.27 | — |
| golang-defaults | Needs evaluation |
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then,...
10 affected packages
golang-1.17, golang-1.20, golang-1.21, golang-1.22, golang-1.23...
| Package | 20.04 LTS |
|---|---|
| golang-1.17 | — |
| golang-1.20 | Needs evaluation |
| golang-1.21 | Needs evaluation |
| golang-1.22 | Needs evaluation |
| golang-1.23 | — |
| golang-1.24 | — |
| golang-1.25 | — |
| golang-1.26 | — |
| golang-1.27 | — |
| golang-defaults | Needs evaluation |