Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-20431

Опубликовано: 27 янв. 2020
Источник: nvd
CVSS3: 7.5
CVSS2: 7.8
EPSS Низкий

Описание

In the Lustre file system before 2.12.3, the ptlrpc module has an osd_map_remote_to_local out-of-bounds access and panic due to the lack of validation for specific fields of packets sent by a client. osd_bufs_get in the osd_ldiskfs module does not validate a certain length value.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:lustre:lustre:*:*:*:*:*:*:*:*
Версия до 2.12.3 (исключая)

EPSS

Процентиль: 71%
0.0066
Низкий

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 6 лет назад

In the Lustre file system before 2.12.3, the ptlrpc module has an osd_map_remote_to_local out-of-bounds access and panic due to the lack of validation for specific fields of packets sent by a client. osd_bufs_get in the osd_ldiskfs module does not validate a certain length value.

CVSS3: 7.5
debian
около 6 лет назад

In the Lustre file system before 2.12.3, the ptlrpc module has an osd_ ...

CVSS3: 7.5
github
больше 3 лет назад

In the Lustre file system before 2.12.3, the ptlrpc module has an osd_map_remote_to_local out-of-bounds access and panic due to the lack of validation for specific fields of packets sent by a client. osd_bufs_get in the osd_ldiskfs module does not validate a certain length value.

EPSS

Процентиль: 71%
0.0066
Низкий

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-787