lustre kayıtları
lustre üreticisine ait 12 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-787 Out-of-bounds Write4
- CWE-125 Out-of-bounds Read2
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2
- CWE-59 Improper Link Resolution Before File Access ('Link Following')1
- CWE-284 Improper Access Control1
- CWE-20 Improper Input Validation1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
12 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2019-20427İstismar yok | In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic, and possibly remote code execution, due to the llustre · lustre · CWE-120 | Kritik9,8 | — | %5,0 | 27 Oca 2020 |
36İzleyin | CVE-2023-51786İstismar yok | An issue was discovered in Lustre versions 2.13.x, 2.14.x, and 2.15.x before 2.15.4, allows attackers to escalate privileges and obtain sensCWE-284 | Kritik9,1 | — | %0,4 | 6 Mar 2024 |
31İzleyin | CVE-2019-20424İstismar yok | In the Lustre file system before 2.12.3, mdt_object_remote in the mdt module has a NULL pointer dereference and panic due to the lack of vallustre · lustre · CWE-476 | Yüksek7,5 | — | %2,9 | 27 Oca 2020 |
31İzleyin | CVE-2019-20423İstismar yok | In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic due to the lack of validation for specific fieldslustre · lustre · CWE-120 | Yüksek7,5 | — | %2,3 | 27 Oca 2020 |
31İzleyin | CVE-2019-20430İstismar yok | In the Lustre file system before 2.12.3, the mdt module has an LBUG panic (via a large MDT Body eadatasize field) due to the lack of validatlustre · lustre · CWE-20 | Yüksek7,5 | — | %2,2 | 27 Oca 2020 |
31İzleyin | CVE-2019-20425İstismar yok | In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds access and panic due to the lack of validation for specific lustre · lustre · CWE-787 | Yüksek7,5 | — | %2,1 | 27 Oca 2020 |
31İzleyin | CVE-2019-20429İstismar yok | In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds read and panic (via a modified lm_bufcount field) due to thelustre · lustre · CWE-125 | Yüksek7,5 | — | %2,1 | 27 Oca 2020 |
31İzleyin | CVE-2019-20426İstismar yok | In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds access and panic due to the lack of validation for specific lustre · lustre · CWE-787 | Yüksek7,5 | — | %1,9 | 27 Oca 2020 |
31İzleyin | CVE-2019-20431İstismar yok | In the Lustre file system before 2.12.3, the ptlrpc module has an osd_map_remote_to_local out-of-bounds access and panic due to the lack of lustre · lustre · CWE-787 | Yüksek7,5 | — | %1,9 | 27 Oca 2020 |
31İzleyin | CVE-2019-20428İstismar yok | In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds read and panic due to the lack of validation for specific filustre · lustre · CWE-125 | Yüksek7,5 | — | %1,8 | 27 Oca 2020 |
31İzleyin | CVE-2019-20432İstismar yok | In the Lustre file system before 2.12.3, the mdt module has an out-of-bounds access and panic due to the lack of validation for specific fielustre · lustre · CWE-787 | Yüksek7,5 | — | %1,8 | 27 Oca 2020 |
27İzleyin | CVE-2008-4970İstismar yok | runiozone in lustre 1.6.5 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/iozone.log temporary file.lustre · lustre-tests · CWE-59 | Orta6,9 | — | %0,3 | 6 Kas 2008 |
- CVE-2019-2042741Planlayın
In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic, and possibly remote code execution, due to the l
KritikCVSS 9,8İstismar yokEPSS %5lustre · lustre27 Oca 2020
- CVE-2023-5178636İzleyin
An issue was discovered in Lustre versions 2.13.x, 2.14.x, and 2.15.x before 2.15.4, allows attackers to escalate privileges and obtain sens
KritikCVSS 9,1İstismar yokEPSS %06 Mar 2024
- CVE-2019-2042431İzleyin
In the Lustre file system before 2.12.3, mdt_object_remote in the mdt module has a NULL pointer dereference and panic due to the lack of val
YüksekCVSS 7,5İstismar yokEPSS %2lustre · lustre27 Oca 2020
- CVE-2019-2042331İzleyin
In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic due to the lack of validation for specific fields
YüksekCVSS 7,5İstismar yokEPSS %2lustre · lustre27 Oca 2020
- CVE-2019-2043031İzleyin
In the Lustre file system before 2.12.3, the mdt module has an LBUG panic (via a large MDT Body eadatasize field) due to the lack of validat
YüksekCVSS 7,5İstismar yokEPSS %2lustre · lustre27 Oca 2020
- CVE-2019-2042531İzleyin
In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds access and panic due to the lack of validation for specific
YüksekCVSS 7,5İstismar yokEPSS %2lustre · lustre27 Oca 2020
- CVE-2019-2042931İzleyin
In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds read and panic (via a modified lm_bufcount field) due to the
YüksekCVSS 7,5İstismar yokEPSS %2lustre · lustre27 Oca 2020
- CVE-2019-2042631İzleyin
In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds access and panic due to the lack of validation for specific
YüksekCVSS 7,5İstismar yokEPSS %1lustre · lustre27 Oca 2020
- CVE-2019-2043131İzleyin
In the Lustre file system before 2.12.3, the ptlrpc module has an osd_map_remote_to_local out-of-bounds access and panic due to the lack of
YüksekCVSS 7,5İstismar yokEPSS %1lustre · lustre27 Oca 2020
- CVE-2019-2042831İzleyin
In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds read and panic due to the lack of validation for specific fi
YüksekCVSS 7,5İstismar yokEPSS %1lustre · lustre27 Oca 2020
- CVE-2019-2043231İzleyin
In the Lustre file system before 2.12.3, the mdt module has an out-of-bounds access and panic due to the lack of validation for specific fie
YüksekCVSS 7,5İstismar yokEPSS %1lustre · lustre27 Oca 2020
- CVE-2008-497027İzleyin
runiozone in lustre 1.6.5 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/iozone.log temporary file.
OrtaCVSS 6,9İstismar yokEPSS %0lustre · lustre-tests6 Kas 2008