Priority LOW 37
In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic due to the lack of validation for specific fields of packets sent by a client.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02376 · Published 2020-01-27 · No fix listed CWE-120
Priority LOW 38
In the Lustre file system before 2.12.3, mdt_object_remote in the mdt module has a NULL pointer dereference and panic due to the lack of validation for specific fields of packets sent by a client.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02948 · Published 2020-01-27 · No fix listed CWE-476
Priority LOW 37
In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds access and panic due to the lack of validation for specific fields of packets sent by a client.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02183 · Published 2020-01-27 · No fix listed CWE-787
Priority LOW 37
In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds access and panic due to the lack of validation for specific fields of packets sent by a client.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0192 · Published 2020-01-27 · No fix listed CWE-787
Priority MEDIUM 50
In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic, and possibly remote code execution, due to the lack of validation for specific fields of packets sent by a client.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.05099 · Published 2020-01-27 · No fix listed CWE-120
Priority LOW 36
In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds read and panic due to the lack of validation for specific fields of packets sent by a client.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01821 · Published 2020-01-27 · No fix listed CWE-125
Priority LOW 37
In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds read and panic (via a modified lm_bufcount field) due to the lack of validation for specific fields of packets sent by a client.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02183 · Published 2020-01-27 · No fix listed CWE-125
Priority LOW 37
In the Lustre file system before 2.12.3, the mdt module has an LBUG panic (via a large MDT Body eadatasize field) due to the lack of validation for specific fields of packets sent by a client.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0221 · Published 2020-01-27 · No fix listed CWE-20
Priority LOW 37
In the Lustre file system before 2.12.3, the ptlrpc module has an osd_map_remote_to_local out-of-bounds access and panic due to the lack of validation for specific fields of packets sent by a client.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0192 · Published 2020-01-27 · No fix listed CWE-787
Priority LOW 36
In the Lustre file system before 2.12.3, the mdt module has an out-of-bounds access and panic due to the lack of validation for specific fields of packets sent by a client.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01808 · Published 2020-01-27 · No fix listed CWE-787