Description (CNA)
A vulnerability was found in axboe fio up to 3.41. This affects the function str_buffer_pattern_cb of the file options.c. Performing manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been made public and could be used.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| axboe / fio | affected 3.0; affected 3.1; affected 3.2; affected 3.3; affected 3.4; affected 3.5; affected 3.6; affected 3.7; affected 3.8; affected 3.9; affected 3.10; affected 3.11; affected 3.12; affected 3.13; affected 3.14; affected 3.15; affected 3.16; affected 3.17; affected 3.18; affected 3.19; affected 3.20; affected 3.21; affected 3.22; affected 3.23; affected 3.24; affected 3.25; affected 3.26; affected 3.27; affected 3.28; affected 3.29; affected 3.30; affected 3.31; affected 3.32; affected 3.33; affected 3.34; affected 3.35; affected 3.36; affected 3.37; affected 3.38; affected 3.39; affected 3.40; affected 3.41 |
CWE
CWE-476, CWE-404
References
- https://vuldb.com/?id.325180
- https://vuldb.com/?ctiid.325180
- https://vuldb.com/?submit.654069
- https://github.com/axboe/fio/issues/1982
- https://github.com/user-attachments/files/22266964/poc.zip
ADP enrichment
No English description supplied.
No references supplied.