Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-13052 State: PUBLISHED Published: 2018-07-05T20:00:00 Last Updated: 2024-08-05T08:52:50.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: In CyberArk Endpoint Privilege Manager (formerly Viewfinity), Privilege Escalation is possible if the attacker has one process that executes as Admin. Additional Analyst Notes: - CVE Program Container: References: - https://www.youtube.com/watch?v=xYRbXBPubaw
CVE ID: CVE-2018-13053 State: PUBLISHED Published: 2018-07-02T12:00:00 Last Updated: 2024-08-05T08:52:49.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: The alarm_timer_nsleep function in kernel/time/alarmtimer.c in the Linux kernel through 4.17.3 has an integer overflow via a large relative timeout because ktime_add_safe is not used. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3821-1/ - https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=5f936e19cc0ef97dbe3a56e9498922ad5ba1edef - https://bugzilla.kernel.org/show_bug.cgi?id=200303 - https://usn.ubuntu.com/3821-2/ - https://lists.debian.org/debian-lts-announce/2019
a.kernel.org/show_bug.cgi?id=200303 - https://usn.ubuntu.com/3821-2/ - https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html - http://www.securityfocus.com/bid/104671 - https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html - https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html - https://access.redhat.com/errata/RHSA-2019:0831 - https://access.redhat.com/errata/RHSA-2019:2043 - https://access.redhat.com/errata/RHSA-2019:2029 - https://usn.ubuntu.com/4094-1/ - https://usn.ubuntu.com/4118-1/
CVE ID: CVE-2018-13054 State: PUBLISHED Published: 2018-07-02T14:00:00 Last Updated: 2024-08-05T08:52:49.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Cinnamon 1.9.2 through 3.8.6. The cinnamon-settings-users.py GUI runs as root and allows configuration of (for example) other users' icon files in _on_face_browse_menuitem_activated and _on_face_menuitem_activated. These icon files are written to the respective user's $HOME/.face location. If an unprivileged user prepares a symlink pointing to an arbitrary location, then this location will be overwritten with the icon content. Additional Analyst Notes: - CVE Program Container: References: - https://
ion will be overwritten with the icon content. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1083067 - https://github.com/linuxmint/Cinnamon/pull/7683 - https://lists.debian.org/debian-lts-announce/2018/07/msg00011.html
CVE ID: CVE-2018-13055 State: PUBLISHED Published: 2018-08-03T18:00:00 Last Updated: 2024-08-05T08:52:49.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the View Filters page (view_filters_page.php) in MantisBT 2.1.0 through 2.15.0 allows remote attackers to inject arbitrary code (if CSP settings permit it) through a crafted PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - https://mantisbt.org/blog/archives/mantisbt/602 - http://github.com/mantisbt/mantisbt/commit/4efac90ed89a5c009108b641e2e95683791a165a - https://mantisbt.org/bugs/view.php?id=24580
CVE ID: CVE-2018-13056 State: PUBLISHED Published: 2018-07-02T15:00:00 Last Updated: 2024-08-05T08:52:49.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on zzcms 8.3. There is a vulnerability at /user/del.php that can delete any file by placing its relative path into the zzcms_main table and then making an img add request. This can be leveraged for database access by deleting install.lock. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/actionyz/ZZCMS/blob/master/del.php.md
CVE ID: CVE-2018-13060 State: PUBLISHED Published: 2020-03-16T14:34:08 Last Updated: 2024-08-05T08:52:49.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: Easy!Appointments 1.3.0 has a Guessable CAPTCHA issue. Additional Analyst Notes: - CVE Program Container: References: - https://sysdream.com/news/lab/ - https://sysdream.com/news/lab/2019-10-25-cve-2018-13060-easy-appointments-captcha-bypass/
CVE ID: CVE-2018-13063 State: PUBLISHED Published: 2020-03-16T14:36:41 Last Updated: 2024-08-05T08:52:50.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: Easy!Appointments 1.3.0 has a Missing Authorization issue allowing retrieval of hashed passwords and salts. Additional Analyst Notes: - CVE Program Container: References: - https://sysdream.com/news/lab/ - https://sysdream.com/news/lab/2019-10-25-cve-2018-13063-easy-appointments-multiple-confidential-information-leakage/
CVE ID: CVE-2018-13065 State: PUBLISHED Published: 2018-07-03T11:00:00 Last Updated: 2024-08-05T08:52:49.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: ModSecurity 3.0.0 has XSS via an onerror attribute of an IMG element. NOTE: a third party has disputed this issue because it may only apply to environments without a Core Rule Set configured Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SpiderLabs/ModSecurity/issues/1829 - https://hackings8n.blogspot.com/2018/07/cve-2018-13065-modsecurity-300-has-xss.html - https://www.exploit-db.com/exploits/44970/
CVE ID: CVE-2018-13066 State: PUBLISHED Published: 2018-07-02T17:00:00 Last Updated: 2024-08-05T08:52:50.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a memory leak in util/parser.c in libming 0.4.8, which will lead to a denial of service via parseSWF_DEFINEBUTTON2, parseSWF_DEFINEFONT, parseSWF_DEFINEFONTINFO, parseSWF_DEFINELOSSLESS, parseSWF_DEFINESPRITE, parseSWF_DEFINETEXT, parseSWF_DOACTION, parseSWF_FILLSTYLEARRAY, parseSWF_FRAMELABEL, parseSWF_LINESTYLEARRAY, parseSWF_PLACEOBJECT2, or parseSWF_SHAPEWITHSTYLE. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libming/libming/issues/146
CVE ID: CVE-2018-13067 State: PUBLISHED Published: 2018-07-02T17:00:00 Last Updated: 2024-08-05T08:52:50.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: /upload/catalog/controller/account/password.php in OpenCart through 3.0.2.0 has CSRF via the index.php?route=account/password URI to change a user's password. Additional Analyst Notes: - CVE Program Container: References: - https://whitehatck01.blogspot.com/2018/06/opencart-v3-0-3-0-user-changes-password.html
CVE ID: CVE-2018-13068 State: PUBLISHED Published: 2018-07-02T23:00:00Z Last Updated: 2024-09-16T18:49:12.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mintToken function of a smart contract implementation for AzurionToken (AZU), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VenusADLab/EtherTokens/blob/master/AzurionToken/AzurionToken.md
CVE ID: CVE-2018-13069 State: PUBLISHED Published: 2018-07-02T23:00:00Z Last Updated: 2024-09-16T19:46:47.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mintToken function of a smart contract implementation for DYchain (DYC), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VenusADLab/EtherTokens/blob/master/DYC/DYC.md
CVE ID: CVE-2018-13070 State: PUBLISHED Published: 2018-07-02T23:00:00Z Last Updated: 2024-09-17T03:23:25.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mintToken function of a smart contract implementation for EncryptedToken (ECC), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VenusADLab/EtherTokens/blob/master/EncryptedToken/EncryptedToken.md
CVE ID: CVE-2018-13071 State: PUBLISHED Published: 2018-07-02T23:00:00Z Last Updated: 2024-09-17T01:31:12.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mintToken function of a smart contract implementation for CCindex10 (T10), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VenusADLab/EtherTokens/blob/master/CCindexToken/CCindexToken.md
CVE ID: CVE-2018-13072 State: PUBLISHED Published: 2018-07-02T23:00:00Z Last Updated: 2024-09-16T23:36:39.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mintToken function of a smart contract implementation for Coffeecoin (COFFEE), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VenusADLab/EtherTokens/blob/master/Coffeecoin/Coffeecoin.md
CVE ID: CVE-2018-13073 State: PUBLISHED Published: 2018-07-02T23:00:00Z Last Updated: 2024-09-16T20:07:45.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mintToken function of a smart contract implementation for ETHEREUMBLACK (ETCBK), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VenusADLab/EtherTokens/blob/master/ETHEREUMBLACK/ETHEREUMBLACK.md
CVE ID: CVE-2018-13074 State: PUBLISHED Published: 2018-07-02T23:00:00Z Last Updated: 2024-09-17T01:12:07.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mintToken function of a smart contract implementation for FIBToken (FIB), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VenusADLab/EtherTokens/blob/master/FIBToken/FIBToken.md
CVE ID: CVE-2018-13075 State: PUBLISHED Published: 2018-07-02T23:00:00Z Last Updated: 2024-09-16T16:37:52.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mintToken function of a smart contract implementation for Carbon Exchange Coin Token (CEC), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VenusADLab/EtherTokens/blob/master/CarbonExchangeCoinToken/CarbonExchangeCoinToken.md
CVE ID: CVE-2018-13076 State: PUBLISHED Published: 2018-07-02T23:00:00Z Last Updated: 2024-09-16T18:43:53.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mintToken function of a smart contract implementation for Betcash (BC), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VenusADLab/EtherTokens/blob/master/Betcash/Betcash.md
CVE ID: CVE-2018-13077 State: PUBLISHED Published: 2018-07-02T23:00:00Z Last Updated: 2024-09-16T20:41:53.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mintToken function of a smart contract implementation for CTB, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VenusADLab/EtherTokens/blob/master/CTB/CTB.md
CVE ID: CVE-2018-13078 State: PUBLISHED Published: 2018-07-02T23:00:00Z Last Updated: 2024-09-17T03:38:00.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mintToken function of a smart contract implementation for Jitech (JTH), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VenusADLab/EtherTokens/blob/master/Jitech/Jitech.md
CVE ID: CVE-2018-13079 State: PUBLISHED Published: 2018-07-02T23:00:00Z Last Updated: 2024-09-16T20:47:07.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mintToken function of a smart contract implementation for GoodTo (GTO), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VenusADLab/EtherTokens/blob/master/GoodTo/GoodTo.md
CVE ID: CVE-2018-13080 State: PUBLISHED Published: 2018-07-02T23:00:00Z Last Updated: 2024-09-17T01:57:05.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mintToken function of a smart contract implementation for Goutex (GTX), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VenusADLab/EtherTokens/blob/master/Goutex/Goutex.md
CVE ID: CVE-2018-13081 State: PUBLISHED Published: 2018-07-02T23:00:00Z Last Updated: 2024-09-16T18:23:50.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mintToken function of a smart contract implementation for GZS Token (GZS), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VenusADLab/EtherTokens/blob/master/GZSToken/GZSToken.md
CVE ID: CVE-2018-13082 State: PUBLISHED Published: 2018-07-02T23:00:00Z Last Updated: 2024-09-16T21:02:24.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mintToken function of a smart contract implementation for MODI Token (MODI), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VenusADLab/EtherTokens/blob/master/ModiTokenERC20/ModiTokenERC20.md
CVE ID: CVE-2018-13083 State: PUBLISHED Published: 2018-07-02T23:00:00Z Last Updated: 2024-09-16T18:50:27.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mintToken function of a smart contract implementation for Plaza Token (PLAZA), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VenusADLab/EtherTokens/blob/master/PlazaToken/PlazaToken.md
CVE ID: CVE-2018-13084 State: PUBLISHED Published: 2018-07-02T23:00:00Z Last Updated: 2024-09-17T02:43:01.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mintToken function of a smart contract implementation for Good Time Coin (GTY), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VenusADLab/EtherTokens/blob/master/GoodTimeCoin/GoodTimeCoin.md
CVE ID: CVE-2018-13085 State: PUBLISHED Published: 2018-07-02T23:00:00Z Last Updated: 2024-09-16T18:09:03.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mintToken function of a smart contract implementation for FreeCoin (FREE), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VenusADLab/EtherTokens/blob/master/FreeCoin/FreeCoin.md
CVE ID: CVE-2018-13086 State: PUBLISHED Published: 2018-07-02T23:00:00Z Last Updated: 2024-09-16T18:24:20.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mintToken function of a smart contract implementation for IADOWR Coin (IAD), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VenusADLab/EtherTokens/blob/master/IADOWR/IADOWR.md
CVE ID: CVE-2018-13087 State: PUBLISHED Published: 2018-07-02T23:00:00Z Last Updated: 2024-09-17T02:11:04.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mintToken function of a smart contract implementation for Coinstar (CSTR), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VenusADLab/EtherTokens/blob/master/MyAdvancedToken/MyAdvancedToken.md
CVE ID: CVE-2018-13088 State: PUBLISHED Published: 2018-07-02T23:00:00Z Last Updated: 2024-09-16T22:03:40.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mintToken function of a smart contract implementation for Futures Pease (FP), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VenusADLab/EtherTokens/blob/master/TokenERC20/TokenERC20.md
CVE ID: CVE-2018-13089 State: PUBLISHED Published: 2018-07-02T23:00:00Z Last Updated: 2024-09-16T18:33:57.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mintToken function of a smart contract implementation for Universal Coin (UCOIN), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VenusADLab/EtherTokens/blob/master/UCoinToken/UCoinToken.md
CVE ID: CVE-2018-13090 State: PUBLISHED Published: 2018-07-02T23:00:00Z Last Updated: 2024-09-16T19:41:17.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mintToken function of a smart contract implementation for YiTongCoin (YTC), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VenusADLab/EtherTokens/blob/master/YiTongCoin/YiTongCoin.md
CVE ID: CVE-2018-13091 State: PUBLISHED Published: 2018-07-02T23:00:00Z Last Updated: 2024-09-16T18:55:54.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mintToken function of a smart contract implementation for sumocoin (SUMO), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VenusADLab/EtherTokens/blob/master/sumocoin/sumocoin.md
CVE ID: CVE-2018-13092 State: PUBLISHED Published: 2018-07-02T23:00:00Z Last Updated: 2024-09-16T16:47:54.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mintToken function of a smart contract implementation for Reimburse Token (REIM), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VenusADLab/EtherTokens/blob/master/ReimburseToken/ReimburseToken.md
CVE ID: CVE-2018-13093 State: PUBLISHED Published: 2018-07-03T05:00:00 Last Updated: 2024-08-05T08:52:50.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in fs/xfs/xfs_icache.c in the Linux kernel through 4.17.3. There is a NULL pointer dereference and panic in lookup_slow() on a NULL inode->i_ops pointer when doing pathwalks on a corrupted xfs image. This occurs because of a lack of proper validation that cached inodes are free during allocation. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/fs/xfs/xfs-linux.git/commit/?h=for-next&id=afca6c5b2595fc44383919fba740c194b0b76aff - https://github.com/torvalds
ub/scm/fs/xfs/xfs-linux.git/commit/?h=for-next&id=afca6c5b2595fc44383919fba740c194b0b76aff - https://github.com/torvalds/linux/commit/afca6c5b2595fc44383919fba740c194b0b76aff - https://bugzilla.kernel.org/show_bug.cgi?id=199367 - https://access.redhat.com/errata/RHSA-2019:2043 - https://access.redhat.com/errata/RHSA-2019:2029 - https://usn.ubuntu.com/4094-1/ - https://usn.ubuntu.com/4118-1/ - https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html
CVE ID: CVE-2018-13094 State: PUBLISHED Published: 2018-07-03T05:00:00 Last Updated: 2024-08-05T08:52:50.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in fs/xfs/libxfs/xfs_attr_leaf.c in the Linux kernel through 4.17.3. An OOPS may occur for a corrupted xfs image after xfs_da_shrink_inode() is called with a NULL bp. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3752-2/ - https://usn.ubuntu.com/3752-3/ - https://usn.ubuntu.com/3753-2/ - https://git.kernel.org/pub/scm/fs/xfs/xfs-linux.git/commit/?h=for-next&id=bb3d48dcf86a97dc25fe9fc2c11938e19cb4399a - https://usn.ubuntu.com/3754-1/ - https://github.com/torvald
it/?h=for-next&id=bb3d48dcf86a97dc25fe9fc2c11938e19cb4399a - https://usn.ubuntu.com/3754-1/ - https://github.com/torvalds/linux/commit/bb3d48dcf86a97dc25fe9fc2c11938e19cb4399a - https://bugzilla.kernel.org/show_bug.cgi?id=199969 - https://usn.ubuntu.com/3752-1/ - https://usn.ubuntu.com/3753-1/ - https://access.redhat.com/errata/RHSA-2019:0831 - https://access.redhat.com/errata/RHSA-2019:2043 - https://access.redhat.com/errata/RHSA-2019:2029 - https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html
CVE ID: CVE-2018-13095 State: PUBLISHED Published: 2018-07-03T05:00:00 Last Updated: 2024-08-05T08:52:50.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.17.3. A denial of service (memory corruption and BUG) can occur for a corrupted xfs image upon encountering an inode that is in extent format, but has more extents than fit in the inode fork. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.kernel.org/show_bug.cgi?id=199915 - https://github.com/torvalds/linux/commit/23fcb3340d033d9f081e21e6c12c2db7eaa541d3 - https://git.kernel.org/pub/scm/fs/xfs/xfs-linux.gi
.com/torvalds/linux/commit/23fcb3340d033d9f081e21e6c12c2db7eaa541d3 - https://git.kernel.org/pub/scm/fs/xfs/xfs-linux.git/commit/?h=for-next&id=23fcb3340d033d9f081e21e6c12c2db7eaa541d3 - https://access.redhat.com/errata/RHSA-2019:1350 - https://access.redhat.com/errata/RHSA-2019:2043 - https://access.redhat.com/errata/RHSA-2019:2029
CVE ID: CVE-2018-13096 State: PUBLISHED Published: 2018-07-03T05:00:00 Last Updated: 2024-08-05T08:52:50.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.14. A denial of service (out-of-bounds memory access and BUG) can occur upon encountering an abnormal bitmap size when mounting a crafted f2fs image. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3821-1/ - https://bugzilla.kernel.org/show_bug.cgi?id=200167 - https://usn.ubuntu.com/3821-2/ - https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html - https://seclists.org/bugtraq/2019/Jan/52 - http://lists
s://lists.debian.org/debian-lts-announce/2019/03/msg00017.html - https://seclists.org/bugtraq/2019/Jan/52 - http://lists.opensuse.org/opensuse-security-announce/2018-10/msg00033.html - http://packetstormsecurity.com/files/151420/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html - https://usn.ubuntu.com/4094-1/ - https://usn.ubuntu.com/4118-1/ - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=e34438c903b653daca2b2a7de95aed46226f8ed3 - https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=e34438c903b653daca2b2a7de95aed46226f8ed3