Approved changes feed: RSS · Atom

cpe:2.3:a:f2fs-tools_project:f2fs-tools:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorF2Fs Tools Project (f4b16a55-9adc-5f11-8359-e56079ac33ce)
ProductF2Fs Tools (06d1833a-9d5a-53b3-a942-47f434c77515)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/f2fs-tools purl2cpe 2026-06-01 10:15:41.578864
pkg:deb/ubuntu/f2fs-tools purl2cpe 2026-06-01 10:15:41.578867
pkg:github/jaegeuk/f2fs-tools purl2cpe 2026-06-01 10:15:41.578870
pkg:rpm/fedora/f2fs-tools purl2cpe 2026-06-01 10:15:41.578872
pkg:rpm/opensuse/f2fs-tools purl2cpe 2026-06-01 10:15:41.578875

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-6108 vulnerable 2026-06-08 05:26:44.556792 Details available
HIGH (8.2)
An exploitable code execution vulnerability exists in the fsck_chk_orphan_node functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause a heap buffer overflow resulting in a code execution. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2020-10-15T14:45:32.000Z
Updated: 2024-08-04T08:47:41.106Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6107 vulnerable 2026-06-08 05:26:44.556126 Details available
MEDIUM (4.4)
An exploitable information disclosure vulnerability exists in the dev_read functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause an uninitialized read resulting in an information disclosure. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2020-10-15T14:45:08.000Z
Updated: 2024-08-04T08:47:41.223Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6106 vulnerable 2026-06-08 05:26:44.555687 Details available
MEDIUM (4.4)
An exploitable information disclosure vulnerability exists in the init_node_manager functionality of F2fs-Tools F2fs.Fsck 1.12 and 1.13. A specially crafted filesystem can be used to disclose information. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2020-10-15T14:48:33.000Z
Updated: 2024-08-04T08:47:41.193Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6105 vulnerable 2026-06-08 05:26:44.555019 Details available
HIGH (8.2)
An exploitable code execution vulnerability exists in the multiple devices functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause Information overwrite resulting in a code execution. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2020-10-15T14:48:07.000Z
Updated: 2024-08-04T08:47:41.090Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6104 vulnerable 2026-06-08 05:26:44.554295 db.gcve.eu details are currently unavailable. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.