CyberRota Analysis
AI-GeneratedA stack overflow vulnerability exists in gfs2-utils due to improper bounds validation in the hash table traversal code, which uses alloca() with an untrusted di_depth field. This can lead to stack exhaustion and denial of service when processing specially crafted GFS2 filesystem images with large di_depth values. Organizations utilizing gfs2-utils should prioritize addressing this vulnerability to prevent potential service disruptions.
Original NVD Description
A stack overflow vulnerability was found in gfs2-utils. The hash table traversal code in metawalk.c uses alloca() with an exponentially-derived size from the untrusted on-disk di_depth field without bounds validation. A crafted GFS2 filesystem image with a large di_depth value causes stack exhaustion and a denial of service when processed by fsck.gfs2, gfs2_edit, or savemeta.