Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2010-2526

lvm2-cluster: insecurity when communicating between lvm2 and clvmd

The cluster logical volume manager daemon (clvmd) in lvm2-cluster in LVM2 before 2.02.72, as used in Red Hat Global File System (GFS) and other products, does not verify client credentials upon a socket connection, which allows local users to cause a denial of service (daemon exit or logical-volume change) or possibly have unspecified other impact via crafted control commands.

CVSS 2.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Heinz Mauelshagen Redhat
Products
Lvm2 Cluster Suite Enterprise Linux and 1 more
CVE-2020-8991

lvm2: memory leak in vg_lookup in daemons/lvmetad/lvmetad-core.c

vg_lookup in daemons/lvmetad/lvmetad-core.c in LVM2 2.02 mismanages memory, leading to an lvmetad memory leak, as demonstrated by running pvs. NOTE: RedHat disputes CVE-2020-8991 as not being a vulnerability since there’s no apparent route to either privilege escalation or to denial of service through the bug

CVSS 3.1 · 2.3 Low EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Lvm2