Lustre

11 CVEs across 2 Lustre products. Browse Lustre vulnerabilities, severities, and proof-of-concept exploits.

Lustre products with known CVEs

ProductCVEs
Lustre10
Lustre-Tests1
Lustre CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2019-20432High7.52020-01-27In the Lustre file system before 2.12.3, the mdt module has an out-of-bounds access and panic due to the lack of validation for specific fields of packets sent…
CVE-2019-20431High7.52020-01-27In the Lustre file system before 2.12.3, the ptlrpc module has an osd_map_remote_to_local out-of-bounds access and panic due to the lack of validation for spec…
CVE-2019-20430High7.52020-01-27In the Lustre file system before 2.12.3, the mdt module has an LBUG panic (via a large MDT Body eadatasize field) due to the lack of validation for specific fi…
CVE-2019-20429High7.52020-01-27In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds read and panic (via a modified lm_bufcount field) due to the lack of validation…
CVE-2019-20428High7.52020-01-27In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds read and panic due to the lack of validation for specific fields of packets sen…
CVE-2019-20427Critical9.82020-01-27In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic, and possibly remote code execution, due to the lack of validation f…
CVE-2019-20426High7.52020-01-27In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds access and panic due to the lack of validation for specific fields of packets s…
CVE-2019-20425High7.52020-01-27In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds access and panic due to the lack of validation for specific fields of packets s…
CVE-2019-20424High7.52020-01-27In the Lustre file system before 2.12.3, mdt_object_remote in the mdt module has a NULL pointer dereference and panic due to the lack of validation for specifi…
CVE-2019-20423High7.52020-01-27In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic due to the lack of validation for specific fields of packets sent by…
CVE-2008-49702008-11-06runiozone in lustre 1.6.5 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/iozone.log temporary file.