Approved changes feed: RSS · Atom
cpe:2.3:a:lustre:lustre:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Lustre (a2288dee-cfaa-5afa-ac36-b9dae3181ee8) |
|---|---|
| Product | Lustre (be349a2d-d34a-5b52-abb3-c01b4cbfb2b9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/llnl/lustre |
purl2cpe | 2026-06-01 10:11:26.902290 |
pkg:github/lustre/lustre-release |
purl2cpe | 2026-06-01 10:11:26.902294 |
pkg:github/rread/lustre |
purl2cpe | 2026-06-01 10:11:26.902297 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-51786 |
vulnerable | 2026-06-08 06:17:53.989189 |
Details available
An issue was discovered in Lustre versions 2.13.x, 2.14.x, and 2.15.x before 2.15.4, allows attackers to escalate privileges and obtain sensitive information via Incorrect Access Control.
Published: 2024-03-07T00:00:00.000Z
Updated: 2024-08-27T20:13:24.659Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20432 |
vulnerable | 2026-06-08 05:13:40.607334 |
Details available
In the Lustre file system before 2.12.3, the mdt module has an out-of-bounds access and panic due to the lack of validation for specific fields of packets sent by a client. mdt_file_secctx_unpack does not validate the value of name_size derived from req_capsule_get_size.
Published: 2020-01-27T04:19:42.000Z
Updated: 2024-08-05T02:39:09.895Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20431 |
vulnerable | 2026-06-08 05:13:40.607014 |
Details available
In the Lustre file system before 2.12.3, the ptlrpc module has an osd_map_remote_to_local out-of-bounds access and panic due to the lack of validation for specific fields of packets sent by a client. osd_bufs_get in the osd_ldiskfs module does not validate a certain length value.
Published: 2020-01-27T04:19:58.000Z
Updated: 2024-08-05T02:39:09.989Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20430 |
vulnerable | 2026-06-08 05:13:40.606678 |
Details available
In the Lustre file system before 2.12.3, the mdt module has an LBUG panic (via a large MDT Body eadatasize field) due to the lack of validation for specific fields of packets sent by a client.
Published: 2020-01-27T04:20:09.000Z
Updated: 2024-08-05T02:39:09.861Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20429 |
vulnerable | 2026-06-08 05:13:40.606263 |
Details available
In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds read and panic (via a modified lm_bufcount field) due to the lack of validation for specific fields of packets sent by a client. This is caused by interaction between sptlrpc_svc_unwrap_request and lustre_msg_hdr_size_v2.
Published: 2020-01-27T04:20:23.000Z
Updated: 2024-08-05T02:39:10.038Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20428 |
vulnerable | 2026-06-08 05:13:40.605931 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20427 |
vulnerable | 2026-06-08 05:13:40.605610 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20426 |
vulnerable | 2026-06-08 05:13:40.605184 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20425 |
vulnerable | 2026-06-08 05:13:40.604840 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20424 |
vulnerable | 2026-06-08 05:13:40.604348 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20423 |
vulnerable | 2026-06-08 05:13:40.603900 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.