VYPR

F2fs Tools

by F2fs Tools Project

CVEs (6)

  • CVE-2020-6108HigOct 15, 2020
    risk 0.51cvss 7.8epss 0.02

    An exploitable code execution vulnerability exists in the fsck_chk_orphan_node functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause a heap buffer overflow resulting in a code execution. An attacker can provide a malicious file to trigger this…

  • CVE-2020-6105HigOct 15, 2020
    risk 0.51cvss 7.8epss 0.02

    An exploitable code execution vulnerability exists in the multiple devices functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause Information overwrite resulting in a code execution. An attacker can provide a malicious file to trigger this…

  • CVE-2020-6070HigAug 10, 2020
    risk 0.51cvss 7.8epss 0.02

    An exploitable code execution vulnerability exists in the file system checking functionality of fsck.f2fs 1.12.0. A specially crafted f2fs file can cause a logic flaw and out-of-bounds heap operations, resulting in code execution. An attacker can provide a malicious file to…

  • CVE-2020-6107MedOct 15, 2020
    risk 0.36cvss 5.5epss 0.01

    An exploitable information disclosure vulnerability exists in the dev_read functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause an uninitialized read resulting in an information disclosure. An attacker can provide a malicious file to trigger…

  • CVE-2020-6106MedOct 15, 2020
    risk 0.36cvss 5.5epss 0.02

    An exploitable information disclosure vulnerability exists in the init_node_manager functionality of F2fs-Tools F2fs.Fsck 1.12 and 1.13. A specially crafted filesystem can be used to disclose information. An attacker can provide a malicious file to trigger this vulnerability.

  • CVE-2020-6104MedOct 15, 2020
    risk 0.36cvss 5.5epss 0.02

    An exploitable information disclosure vulnerability exists in the get_dnode_of_data functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause information disclosure resulting in a information disclosure. An attacker can provide a malicious file to…