CVE-2019-20424

概要

参考情報

• lustre.org · Product
• wiki.lustre.org/Lustre_2.12.3_Changelog · Release Notes
• jira.whamcloud.com/browse/LU-12615 · Exploit
• review.whamcloud.com · Third Party Advisory

lustre のその他の脆弱性

• CVE-2019-20432高 7.5In the Lustre file system before 2.12.3, the mdt module has an out-of-bounds access and panic due to the lack of validation for specific fie…
• CVE-2019-20431高 7.5In the Lustre file system before 2.12.3, the ptlrpc module has an osd_map_remote_to_local out-of-bounds access and panic due to the lack of …
• CVE-2019-20430高 7.5In the Lustre file system before 2.12.3, the mdt module has an LBUG panic (via a large MDT Body eadatasize field) due to the lack of validat…
• CVE-2019-20429高 7.5In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds read and panic (via a modified lm_bufcount field) due to the…
• CVE-2019-20428高 7.5In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds read and panic due to the lack of validation for specific fi…