Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In the Lustre file system before 2.12.3, the mdt module has an out-of-bounds access and panic due to the lack of validation for specific fields of packets sent by a client. mdt_file_secctx_unpack does not validate the value of name_size derived from req_capsule_get_size.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Lustre mdt模块缓冲区错误漏洞
Vulnerability Description
Lustre是Lustre社区的一款为大规模计算系统提供一个全局一致的与POSIX兼容的分布式并行文件系统。 Lustre 2.12.3之前版本中的mdt模块存在缓冲区错误漏洞，该漏洞源于‘mdt_file_secctx_unpack’函数没有验证name_size的值。远程攻击者可利用该漏洞导致系统崩溃。
CVSS Information
N/A
Vulnerability Type
N/A