In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic due to the lack of validation for specific fields of packets sent by a client. The function target_handle_connect() mishandles a certain size value when a client connects to a server, because of an integer signedness error.
References
| Link | Resource |
|---|---|
| http://lustre.org/ | Product Vendor Advisory |
| http://wiki.lustre.org/Lustre_2.12.3_Changelog | Release Notes Vendor Advisory |
| https://jira.whamcloud.com/browse/LU-12605 | Exploit Third Party Advisory |
| https://review.whamcloud.com/#/c/35935/ | Third Party Advisory |
| http://lustre.org/ | Product Vendor Advisory |
| http://wiki.lustre.org/Lustre_2.12.3_Changelog | Release Notes Vendor Advisory |
| https://jira.whamcloud.com/browse/LU-12605 | Exploit Third Party Advisory |
| https://review.whamcloud.com/#/c/35935/ | Third Party Advisory |
Configurations
History
21 Nov 2024, 04:38
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://lustre.org/ - Product, Vendor Advisory | |
| References | () http://wiki.lustre.org/Lustre_2.12.3_Changelog - Release Notes, Vendor Advisory | |
| References | () https://jira.whamcloud.com/browse/LU-12605 - Exploit, Third Party Advisory | |
| References | () https://review.whamcloud.com/#/c/35935/ - Third Party Advisory |
Information
Published : 2020-01-27 05:15
Updated : 2024-11-21 04:38
NVD link : CVE-2019-20423
Mitre link : CVE-2019-20423
CVE.ORG link : CVE-2019-20423
JSON object : View
Products Affected
lustre
- lustre
CWE
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')