Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-43cg-f93f-9jhx

Опубликовано: 03 июн. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

A divide-by-zero vulnerability in the ext4_block_set_lb_size function in src/ext4_blockdev.c of the lwext4 1.0.0 library allows attackers to cause a denial of service by providing a malformed ext4 filesystem image that results in a zero logical block size. The vulnerability is triggered during mount or image processing and leads to a Floating-Point Exception (FPE) under sanitizers or a runtime crash in standard builds due to missing validation of lb_size.

A divide-by-zero vulnerability in the ext4_block_set_lb_size function in src/ext4_blockdev.c of the lwext4 1.0.0 library allows attackers to cause a denial of service by providing a malformed ext4 filesystem image that results in a zero logical block size. The vulnerability is triggered during mount or image processing and leads to a Floating-Point Exception (FPE) under sanitizers or a runtime crash in standard builds due to missing validation of lb_size.

EPSS

Процентиль: 6%
0.00162
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-369

Связанные уязвимости

CVSS3: 5.5
nvd
3 месяца назад

A divide-by-zero vulnerability in the ext4_block_set_lb_size function in src/ext4_blockdev.c of the lwext4 1.0.0 library allows attackers to cause a denial of service by providing a malformed ext4 filesystem image that results in a zero logical block size. The vulnerability is triggered during mount or image processing and leads to a Floating-Point Exception (FPE) under sanitizers or a runtime crash in standard builds due to missing validation of lb_size.

EPSS

Процентиль: 6%
0.00162
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-369