Description (CNA)
A vulnerability was determined in axboe fio up to 3.41. This impacts the function __parse_jobs_ini of the file init.c. Executing manipulation can lead to use after free. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| axboe / fio | affected 3.0; affected 3.1; affected 3.2; affected 3.3; affected 3.4; affected 3.5; affected 3.6; affected 3.7; affected 3.8; affected 3.9; affected 3.10; affected 3.11; affected 3.12; affected 3.13; affected 3.14; affected 3.15; affected 3.16; affected 3.17; affected 3.18; affected 3.19; affected 3.20; affected 3.21; affected 3.22; affected 3.23; affected 3.24; affected 3.25; affected 3.26; affected 3.27; affected 3.28; affected 3.29; affected 3.30; affected 3.31; affected 3.32; affected 3.33; affected 3.34; affected 3.35; affected 3.36; affected 3.37; affected 3.38; affected 3.39; affected 3.40; affected 3.41 |
CWE
CWE-416, CWE-119
References
- https://vuldb.com/?id.325181
- https://vuldb.com/?ctiid.325181
- https://vuldb.com/?submit.654072
- https://github.com/axboe/fio/issues/1981
- https://github.com/user-attachments/files/22266756/poc.zip
ADP enrichment
No English description supplied.
No references supplied.