Bug ID 1199133
Summary VUL-1: CVE-2022-29973: fuse-exfat, exfat-utils: allows local users to obtain data from deleted files in the filesystem
Classification openSUSE
Product openSUSE Distribution
Version Leap 15.4
Hardware Other
URL https://smash.suse.de/issue/330470/
OS Other
Status NEW
Severity Minor
Priority P5 - None
Component Security
Assignee lnussel@suse.com
Reporter cathy.hu@suse.com
QA Contact security-team@suse.de
Found By Security Response Team
Blocker ---

CVE-2022-29973

relan exFAT 1.3.0 allows local users to obtain sensitive information (data from
deleted files in the filesystem) in certain situations involving offsets beyond
ValidDataLength.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-29973
https://github.com/relan/exfat/issues/185
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29973


You are receiving this mail because: