Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6fc4-88rc-xvr2

Опубликовано: 31 мая 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.1

Описание

An issue was discovered in the Linux kernel before 6.2. The ntfs3 subsystem does not properly check for correctness during disk reads, leading to an out-of-bounds read in ntfs_set_ea in fs/ntfs3/xattr.c.

An issue was discovered in the Linux kernel before 6.2. The ntfs3 subsystem does not properly check for correctness during disk reads, leading to an out-of-bounds read in ntfs_set_ea in fs/ntfs3/xattr.c.

EPSS

Процентиль: 1%
0.00011
Низкий

7.1 High

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 7.1
ubuntu
около 2 лет назад

An issue was discovered in the Linux kernel before 6.2. The ntfs3 subsystem does not properly check for correctness during disk reads, leading to an out-of-bounds read in ntfs_set_ea in fs/ntfs3/xattr.c.

CVSS3: 7.1
redhat
больше 2 лет назад

An issue was discovered in the Linux kernel before 6.2. The ntfs3 subsystem does not properly check for correctness during disk reads, leading to an out-of-bounds read in ntfs_set_ea in fs/ntfs3/xattr.c.

CVSS3: 7.1
nvd
около 2 лет назад

An issue was discovered in the Linux kernel before 6.2. The ntfs3 subsystem does not properly check for correctness during disk reads, leading to an out-of-bounds read in ntfs_set_ea in fs/ntfs3/xattr.c.

CVSS3: 7.1
debian
около 2 лет назад

An issue was discovered in the Linux kernel before 6.2. The ntfs3 subs ...

CVSS3: 7.1
fstec
больше 2 лет назад

Уязвимость функции ntfs_set_ea() в модуле fs/ntfs3/xattr.c драйвера файловой системы ntfs ядра операционной системы Linux, позволяющая нарушителю получить доступ к защищаемой информации или вызвать отказ в обслуживании

EPSS

Процентиль: 1%
0.00011
Низкий

7.1 High

CVSS3

Дефекты

CWE-125