Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic, and possibly remote code execution, due to the lack of validation for specific fields of packets sent by a client. Interaction between req_capsule_get_size and tgt_brw_write leads to a tgt_shortio2pages integer signedness error.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Lustre ptlrpc模块缓冲区错误漏洞
Vulnerability Description
Lustre是Lustre社区的一款为大规模计算系统提供一个全局一致的与POSIX兼容的分布式并行文件系统。 Lustre 2.12.3之前版本的ptlrpc模块中存在缓冲区错误漏洞，该漏洞源于程序没有验证客户端发送数据的特定字段。远程攻击者可利用该漏洞执行代码。
CVSS Information
N/A
Vulnerability Type
N/A