Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9gvv-jxrj-2xcq

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6

Описание

A flaw was found in the Linux kernel. An index buffer overflow during Direct IO write leading to the NFS client to crash. In some cases, a reach out of the index after one memory allocation by kmalloc will cause a kernel panic. The highest threat from this vulnerability is to data confidentiality and system availability.

A flaw was found in the Linux kernel. An index buffer overflow during Direct IO write leading to the NFS client to crash. In some cases, a reach out of the index after one memory allocation by kmalloc will cause a kernel panic. The highest threat from this vulnerability is to data confidentiality and system availability.

EPSS

Процентиль: 32%
0.0012
Низкий

6 Medium

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 6
ubuntu
около 4 лет назад

A flaw was found in the Linux kernel. An index buffer overflow during Direct IO write leading to the NFS client to crash. In some cases, a reach out of the index after one memory allocation by kmalloc will cause a kernel panic. The highest threat from this vulnerability is to data confidentiality and system availability.

CVSS3: 6
redhat
около 5 лет назад

A flaw was found in the Linux kernel. An index buffer overflow during Direct IO write leading to the NFS client to crash. In some cases, a reach out of the index after one memory allocation by kmalloc will cause a kernel panic. The highest threat from this vulnerability is to data confidentiality and system availability.

CVSS3: 6
nvd
около 4 лет назад

A flaw was found in the Linux kernel. An index buffer overflow during Direct IO write leading to the NFS client to crash. In some cases, a reach out of the index after one memory allocation by kmalloc will cause a kernel panic. The highest threat from this vulnerability is to data confidentiality and system availability.

CVSS3: 6
debian
около 4 лет назад

A flaw was found in the Linux kernel. An index buffer overflow during ...

CVSS3: 6
fstec
около 5 лет назад

Уязвимость функции Direct IO ядра операционных систем Linux, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации или вызвать отказ в обслуживании

EPSS

Процентиль: 32%
0.0012
Низкий

6 Medium

CVSS3

Дефекты

CWE-787