POJIA破甲
地图 / CVE-2020-9383 Floppy OOB read

CVE-2020-9383 Floppy OOB read

内存破坏 / 缓冲区越界读 / #891846

厂商
Internet Bug Bounty
严重程度
中危 · CVSS 7
赏金
$750
弱点
缓冲区越界读
研究员
@jordyzomer
披露日期
2021-08-22
资产
IBB (Legacy)
CVE
CVE-2020-9383

该报告还没有中文解读。

原文摘录

摘自原文(979 字符中的一小部分)
A vulnerability was found in Linux Kernel up to 5.5.6 (Operating System) and classified as critical. Affected by this issue is the function `set_fdc` of the file `drivers/block/floppy.c`. The manipulation with an unknown input leads to a memory corruption vulnerability (Out-of-Bounds). Using CWE to …

默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 Internet Bug Bounty 所有。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @jordyzomer · 版权归作者与 Internet Bug Bounty 所有

同类报告

Heap Buffer Overflow (READ: 4) in phar_parse_pharfileInternet Bug Bounty · 2020-10-10Out-of-bounds read in iconv.c:_php_iconv_mime_decode() due to integer overflowInternet Bug Bounty · 2020-10-12 · $1,500CVE-2024-7264: ASN.1 date parser overreadcurl · 2024-08-01CVE-2024-7347: Buffer overread in the ngx_http_mp4_moduleInternet Bug Bounty · 2024-08-27 · $2,142apache access.log leakage via long request on https://rapida.ru/QIWI · —CVE-2025-9086: Out of bounds read for cookie pathcurl · 2025-09-10