CVE-2019-20430

Опубликовано: 27 янв. 2020

Источник: nvd

CVSS3: 7.5

CVSS2: 7.8

EPSS Низкий

Описание

In the Lustre file system before 2.12.3, the mdt module has an LBUG panic (via a large MDT Body eadatasize field) due to the lack of validation for specific fields of packets sent by a client.

Ссылки

http://lustre.org/
Product
Vendor Advisory
http://wiki.lustre.org/Lustre_2.12.3_Changelog
Release Notes
Vendor Advisory
https://jira.whamcloud.com/browse/LU-12602
Exploit
Third Party Advisory
https://review.whamcloud.com/#/c/36208/
Third Party Advisory
http://lustre.org/
Product
Vendor Advisory
http://wiki.lustre.org/Lustre_2.12.3_Changelog
Release Notes
Vendor Advisory
https://jira.whamcloud.com/browse/LU-12602
Exploit
Third Party Advisory
https://review.whamcloud.com/#/c/36208/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:lustre:lustre:*:*:*:*:*:*:*:*

Версия до 2.12.3 (исключая)

EPSS

Процентиль: 71%

0.00664

Низкий

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2019-20430

CVSS3: 7.5

ubuntu

около 6 лет назад

In the Lustre file system before 2.12.3, the mdt module has an LBUG panic (via a large MDT Body eadatasize field) due to the lack of validation for specific fields of packets sent by a client.

CVE-2019-20430

CVSS3: 7.5

debian

около 6 лет назад

In the Lustre file system before 2.12.3, the mdt module has an LBUG pa ...

GHSA-r69g-j328-rwcg

CVSS3: 7.5

github

больше 3 лет назад

In the Lustre file system before 2.12.3, the mdt module has an LBUG panic (via a large MDT Body eadatasize field) due to the lack of validation for specific fields of packets sent by a client.

EPSS

Процентиль: 71%

0.00664

Низкий

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-20