ZeroHour

CVE-2019-20430

PoC
CVSS 3.1
7.5 high
EPSS
2%p82
Published
()
Modified
Description

In the Lustre file system before 2.12.3, the mdt module has an LBUG panic (via a large MDT Body eadatasize field) due to the lack of validation for specific fields of packets sent by a client.

Vendors
lustre
Products
lustre
Weakness
CWE-20, CWE-670
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

In the news

No ingested article mentions this CVE yet.