Записи lustre
12 опубликованных записей вендора lustre.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 0 · 0 %
- Pre-auth RCE
- 1
- С записью об исправлении
- 0 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Повторяющиеся классы
- CWE-787 Out-of-bounds Write4
- CWE-125 Out-of-bounds Read2
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2
- CWE-59 Improper Link Resolution Before File Access ('Link Following')1
- CWE-284 Improper Access Control1
- CWE-20 Improper Input Validation1
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
12 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
41В плане | CVE-2019-20427Эксплойта нет | In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic, and possibly remote code execution, due to the llustre · lustre · CWE-120 | Критическая9,8 | — | 5,0 % | 27 янв. 2020 г. |
36Наблюдать | CVE-2023-51786Эксплойта нет | An issue was discovered in Lustre versions 2.13.x, 2.14.x, and 2.15.x before 2.15.4, allows attackers to escalate privileges and obtain sensCWE-284 | Критическая9,1 | — | 0,4 % | 6 мар. 2024 г. |
31Наблюдать | CVE-2019-20424Эксплойта нет | In the Lustre file system before 2.12.3, mdt_object_remote in the mdt module has a NULL pointer dereference and panic due to the lack of vallustre · lustre · CWE-476 | Высокая7,5 | — | 2,9 % | 27 янв. 2020 г. |
31Наблюдать | CVE-2019-20423Эксплойта нет | In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic due to the lack of validation for specific fieldslustre · lustre · CWE-120 | Высокая7,5 | — | 2,3 % | 27 янв. 2020 г. |
31Наблюдать | CVE-2019-20430Эксплойта нет | In the Lustre file system before 2.12.3, the mdt module has an LBUG panic (via a large MDT Body eadatasize field) due to the lack of validatlustre · lustre · CWE-20 | Высокая7,5 | — | 2,2 % | 27 янв. 2020 г. |
31Наблюдать | CVE-2019-20425Эксплойта нет | In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds access and panic due to the lack of validation for specific lustre · lustre · CWE-787 | Высокая7,5 | — | 2,1 % | 27 янв. 2020 г. |
31Наблюдать | CVE-2019-20429Эксплойта нет | In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds read and panic (via a modified lm_bufcount field) due to thelustre · lustre · CWE-125 | Высокая7,5 | — | 2,1 % | 27 янв. 2020 г. |
31Наблюдать | CVE-2019-20426Эксплойта нет | In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds access and panic due to the lack of validation for specific lustre · lustre · CWE-787 | Высокая7,5 | — | 1,9 % | 27 янв. 2020 г. |
31Наблюдать | CVE-2019-20431Эксплойта нет | In the Lustre file system before 2.12.3, the ptlrpc module has an osd_map_remote_to_local out-of-bounds access and panic due to the lack of lustre · lustre · CWE-787 | Высокая7,5 | — | 1,9 % | 27 янв. 2020 г. |
31Наблюдать | CVE-2019-20428Эксплойта нет | In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds read and panic due to the lack of validation for specific filustre · lustre · CWE-125 | Высокая7,5 | — | 1,8 % | 27 янв. 2020 г. |
31Наблюдать | CVE-2019-20432Эксплойта нет | In the Lustre file system before 2.12.3, the mdt module has an out-of-bounds access and panic due to the lack of validation for specific fielustre · lustre · CWE-787 | Высокая7,5 | — | 1,8 % | 27 янв. 2020 г. |
27Наблюдать | CVE-2008-4970Эксплойта нет | runiozone in lustre 1.6.5 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/iozone.log temporary file.lustre · lustre-tests · CWE-59 | Средняя6,9 | — | 0,3 % | 6 нояб. 2008 г. |
- CVE-2019-2042741В плане
In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic, and possibly remote code execution, due to the l
КритическаяCVSS 9,8Эксплойта нетEPSS 5 %lustre · lustre27 янв. 2020 г.
- CVE-2023-5178636Наблюдать
An issue was discovered in Lustre versions 2.13.x, 2.14.x, and 2.15.x before 2.15.4, allows attackers to escalate privileges and obtain sens
КритическаяCVSS 9,1Эксплойта нетEPSS 0 %6 мар. 2024 г.
- CVE-2019-2042431Наблюдать
In the Lustre file system before 2.12.3, mdt_object_remote in the mdt module has a NULL pointer dereference and panic due to the lack of val
ВысокаяCVSS 7,5Эксплойта нетEPSS 2 %lustre · lustre27 янв. 2020 г.
- CVE-2019-2042331Наблюдать
In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic due to the lack of validation for specific fields
ВысокаяCVSS 7,5Эксплойта нетEPSS 2 %lustre · lustre27 янв. 2020 г.
- CVE-2019-2043031Наблюдать
In the Lustre file system before 2.12.3, the mdt module has an LBUG panic (via a large MDT Body eadatasize field) due to the lack of validat
ВысокаяCVSS 7,5Эксплойта нетEPSS 2 %lustre · lustre27 янв. 2020 г.
- CVE-2019-2042531Наблюдать
In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds access and panic due to the lack of validation for specific
ВысокаяCVSS 7,5Эксплойта нетEPSS 2 %lustre · lustre27 янв. 2020 г.
- CVE-2019-2042931Наблюдать
In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds read and panic (via a modified lm_bufcount field) due to the
ВысокаяCVSS 7,5Эксплойта нетEPSS 2 %lustre · lustre27 янв. 2020 г.
- CVE-2019-2042631Наблюдать
In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds access and panic due to the lack of validation for specific
ВысокаяCVSS 7,5Эксплойта нетEPSS 1 %lustre · lustre27 янв. 2020 г.
- CVE-2019-2043131Наблюдать
In the Lustre file system before 2.12.3, the ptlrpc module has an osd_map_remote_to_local out-of-bounds access and panic due to the lack of
ВысокаяCVSS 7,5Эксплойта нетEPSS 1 %lustre · lustre27 янв. 2020 г.
- CVE-2019-2042831Наблюдать
In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds read and panic due to the lack of validation for specific fi
ВысокаяCVSS 7,5Эксплойта нетEPSS 1 %lustre · lustre27 янв. 2020 г.
- CVE-2019-2043231Наблюдать
In the Lustre file system before 2.12.3, the mdt module has an out-of-bounds access and panic due to the lack of validation for specific fie
ВысокаяCVSS 7,5Эксплойта нетEPSS 1 %lustre · lustre27 янв. 2020 г.
- CVE-2008-497027Наблюдать
runiozone in lustre 1.6.5 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/iozone.log temporary file.
СредняяCVSS 6,9Эксплойта нетEPSS 0 %lustre · lustre-tests6 нояб. 2008 г.