Логотип exploitDog
bind:CVE-2021-3492
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2021-3492

Количество 6

Количество 6

ubuntu логотип

CVE-2021-3492

почти 5 лет назад

Shiftfs, an out-of-tree stacking file system included in Ubuntu Linux kernels, did not properly handle faults occurring during copy_from_user() correctly. These could lead to either a double-free situation or memory not being freed at all. An attacker could use this to cause a denial of service (kernel memory exhaustion) or gain privileges via executing arbitrary code. AKA ZDI-CAN-13562.

CVSS3: 8.8
EPSS: Средний
redhat логотип

CVE-2021-3492

почти 5 лет назад

Shiftfs, an out-of-tree stacking file system included in Ubuntu Linux kernels, did not properly handle faults occurring during copy_from_user() correctly. These could lead to either a double-free situation or memory not being freed at all. An attacker could use this to cause a denial of service (kernel memory exhaustion) or gain privileges via executing arbitrary code. AKA ZDI-CAN-13562.

CVSS3: 7.8
EPSS: Средний
nvd логотип

CVE-2021-3492

почти 5 лет назад

Shiftfs, an out-of-tree stacking file system included in Ubuntu Linux kernels, did not properly handle faults occurring during copy_from_user() correctly. These could lead to either a double-free situation or memory not being freed at all. An attacker could use this to cause a denial of service (kernel memory exhaustion) or gain privileges via executing arbitrary code. AKA ZDI-CAN-13562.

CVSS3: 8.8
EPSS: Средний
debian логотип

CVE-2021-3492

почти 5 лет назад

Shiftfs, an out-of-tree stacking file system included in Ubuntu Linux ...

CVSS3: 8.8
EPSS: Средний
github логотип

GHSA-hr5j-7qj8-mpp3

больше 3 лет назад

Shiftfs, an out-of-tree stacking file system included in Ubuntu Linux kernels, did not properly handle faults occurring during copy_from_user() correctly. These could lead to either a double-free situation or memory not being freed at all. An attacker could use this to cause a denial of service (kernel memory exhaustion) or gain privileges via executing arbitrary code. AKA ZDI-CAN-13562.

EPSS: Средний
fstec логотип

BDU:2021-04860

почти 5 лет назад

Уязвимость функции copy_from_user() файловой системы shiftfs ядра операционной системы Linux, связанная с повторным освобождением памяти, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании

CVSS3: 7.8
EPSS: Средний

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2021-3492

Shiftfs, an out-of-tree stacking file system included in Ubuntu Linux kernels, did not properly handle faults occurring during copy_from_user() correctly. These could lead to either a double-free situation or memory not being freed at all. An attacker could use this to cause a denial of service (kernel memory exhaustion) or gain privileges via executing arbitrary code. AKA ZDI-CAN-13562.

CVSS3: 8.8
24%
Средний
почти 5 лет назад
redhat логотип
CVE-2021-3492

Shiftfs, an out-of-tree stacking file system included in Ubuntu Linux kernels, did not properly handle faults occurring during copy_from_user() correctly. These could lead to either a double-free situation or memory not being freed at all. An attacker could use this to cause a denial of service (kernel memory exhaustion) or gain privileges via executing arbitrary code. AKA ZDI-CAN-13562.

CVSS3: 7.8
24%
Средний
почти 5 лет назад
nvd логотип
CVE-2021-3492

Shiftfs, an out-of-tree stacking file system included in Ubuntu Linux kernels, did not properly handle faults occurring during copy_from_user() correctly. These could lead to either a double-free situation or memory not being freed at all. An attacker could use this to cause a denial of service (kernel memory exhaustion) or gain privileges via executing arbitrary code. AKA ZDI-CAN-13562.

CVSS3: 8.8
24%
Средний
почти 5 лет назад
debian логотип
CVE-2021-3492

Shiftfs, an out-of-tree stacking file system included in Ubuntu Linux ...

CVSS3: 8.8
24%
Средний
почти 5 лет назад
github логотип
GHSA-hr5j-7qj8-mpp3

Shiftfs, an out-of-tree stacking file system included in Ubuntu Linux kernels, did not properly handle faults occurring during copy_from_user() correctly. These could lead to either a double-free situation or memory not being freed at all. An attacker could use this to cause a denial of service (kernel memory exhaustion) or gain privileges via executing arbitrary code. AKA ZDI-CAN-13562.

24%
Средний
больше 3 лет назад
fstec логотип
BDU:2021-04860

Уязвимость функции copy_from_user() файловой системы shiftfs ядра операционной системы Linux, связанная с повторным освобождением памяти, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании

CVSS3: 7.8
24%
Средний
почти 5 лет назад

Уязвимостей на страницу