filters/filter-cso/filter-stream.c in the CSO filter in libMirage 3.2.2 in CDemu does not validate the part size, triggering a heap-based buffer overflow that can lead to root access by a local Linux. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available.
Buffer Overflow
Memory Corruption
Libmirage
NVD
GitHub
CVSS 3.0
7.8
EPSS
0.6%
An issue was discovered in xfs_setattr_nonsize in fs/xfs/xfs_iops.c in the Linux kernel through 5.2.9. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.
Denial Of Service
Linux
Linux Kernel
Ubuntu Linux
Data Availability Services
+15
NVD
GitHub
CVSS 3.1
7.5
EPSS
3.9%