CVE-2020-6105

February 2, 2021

An exploitable code execution vulnerability exists in the multiple devices functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause Information overwrite resulting in a code execution. An attacker can provide a malicious file to trigger this vulnerability.

Summary:

An exploitable code execution vulnerability exists in the multiple devices functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause Information overwrite resulting in a code execution. An attacker can provide a malicious file to trigger this vulnerability.

Reference Links(if available):

  • https://talosintelligence.com/vulnerability_reports/TALOS-2020-1047
  • https://security.gentoo.org/glsa/202101-26

  • CVSS Score (if available)

    v2: / MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

    v3: / HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

    Links to Exploits(if available)

  • Tags: , , , ,

    You may have missed

    image

    [LOCKBIT3] – Ransomware Victim: 9fsfalcons[.]org

    December 23, 2024
    image

    [HUNTERS] – Ransomware Victim: SmartLynx Airlines SIA

    December 23, 2024
    image

    [APT73] – Ransomware Victim: linebank[.]co[.]id

    December 23, 2024
    image

    [CACTUS] – Ransomware Victim: galatachemicals[.]com

    December 23, 2024
    image

    [FUNKSEC] – Ransomware Victim: kfar-yona[.]muni[.]il

    December 23, 2024