Eric Sandeen

2 exploits Active since Jul 2018

CVE-2021-33909 WRITEUP HIGH WRITEUP

Linux Kernel 3.16-5.13.x < 5.13.4 - Integer Overflow and Out-of-bounds Write in seq_file

fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of-bounds Write, and escalation to root by an unprivileged user, aka CID-8cae8cd89f05.

CVSS 7.8

View Code

CVE-2018-13094 WRITEUP MEDIUM WRITEUP

Linux Kernel < 4.17.3 - NULL Pointer Dereference in xfs_da_shrink_inode

An issue was discovered in fs/xfs/libxfs/xfs_attr_leaf.c in the Linux kernel through 4.17.3. An OOPS may occur for a corrupted xfs image after xfs_da_shrink_inode() is called with a NULL bp.

CVSS 5.5

View Code