CVE-2019-20424

Опубликовано: 27 янв. 2020

Источник: nvd

CVSS3: 7.5

CVSS2: 7.8

EPSS Низкий

Описание

In the Lustre file system before 2.12.3, mdt_object_remote in the mdt module has a NULL pointer dereference and panic due to the lack of validation for specific fields of packets sent by a client.

Ссылки

http://lustre.org/
Product
Vendor Advisory
http://wiki.lustre.org/Lustre_2.12.3_Changelog
Release Notes
Vendor Advisory
https://jira.whamcloud.com/browse/LU-12615
Exploit
Third Party Advisory
https://review.whamcloud.com/#/c/35869/
Third Party Advisory
http://lustre.org/
Product
Vendor Advisory
http://wiki.lustre.org/Lustre_2.12.3_Changelog
Release Notes
Vendor Advisory
https://jira.whamcloud.com/browse/LU-12615
Exploit
Third Party Advisory
https://review.whamcloud.com/#/c/35869/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:lustre:lustre:*:*:*:*:*:*:*:*

Версия до 2.12.3 (исключая)

EPSS

Процентиль: 71%

0.00666

Низкий

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-476

Связанные уязвимости

CVE-2019-20424

CVSS3: 7.5

ubuntu

около 6 лет назад

In the Lustre file system before 2.12.3, mdt_object_remote in the mdt module has a NULL pointer dereference and panic due to the lack of validation for specific fields of packets sent by a client.

CVE-2019-20424

CVSS3: 7.5

debian

около 6 лет назад

In the Lustre file system before 2.12.3, mdt_object_remote in the mdt ...

GHSA-9p3q-fr3r-wr97

CVSS3: 7.5

github

больше 3 лет назад

In the Lustre file system before 2.12.3, mdt_object_remote in the mdt module has a NULL pointer dereference and panic due to the lack of validation for specific fields of packets sent by a client.

EPSS

Процентиль: 71%

0.00666

Низкий

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-476