Lucene search
Alpine Linux Development TeamALPINE:CVE-2020-6108HistoryOct 15, 2020 - 3:15 p.m.
CVE-2020-6108
2020-10-1515:15:00
Alpine Linux Development Team
security.alpinelinux.org
22
code execution
vulnerability
f2fs-tools
EPSS
0.001
Percentile
40.1%
An exploitable code execution vulnerability exists in the fsck_chk_orphan_node functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause a heap buffer overflow resulting in a code execution. An attacker can provide a malicious file to trigger this vulnerability.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | 3.12-main | noarch | f2fs-tools | = 1.13.0-r0 | UNKNOWN |
| Alpine | 3.11-main | noarch | f2fs-tools | = 1.13.0-r0 | UNKNOWN |
| Alpine | 3.10-main | noarch | f2fs-tools | = 1.12.0-r0 | UNKNOWN |
Related
cve
cve
CVE-2020-6108
2020-10-15 15:15:11
nvd
nvd
CVE-2020-6108
2020-10-15 15:15:11
osv
osv
CVE-2020-6108
2020-10-15 15:15:11
veracode
veracode
Arbitrary Code Execution
2021-01-04 20:34:37
cvelist
cvelist
CVE-2020-6108
2020-10-15 14:45:32
debiancve
debiancve
CVE-2020-6108
2020-10-15 15:15:11
prion
prion
Heap overflow
2020-10-15 15:15:00
talos
talos
F2fs-Tools F2fs.Fsck fsck_chk_orphan_node Code Execution Vulnerability
2020-10-14 00:00:00
ubuntucve
ubuntucve
CVE-2020-6108
2020-10-15 00:00:00
nessus
nessus
GLSA-202101-26 : f2fs-tools: Multiple vulnerabilities
2021-01-26 00:00:00
gentoo
gentoo
f2fs-tools: Multiple vulnerabilities
2021-01-26 00:00:00