Your NVMe Had Been Syz’ed: Fuzzing NVMe-oF/TCP Driver for Linux with Syzkaller
Tags
| attack-pattern: | Data Exploits - T1587.004 Exploits - T1588.005 Server - T1583.004 Server - T1584.004 Vulnerabilities - T1588.006 Sudo - T1169 |
Common Information
| Type | Value |
|---|---|
| UUID | 66ea4fec-0f70-45db-8bba-b449952f33b9 |
| Fingerprint | aeb2985bb825ba95 |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | April 25, 2024, midnight |
| Added to db | Dec. 18, 2024, 8:07 p.m. |
| Last updated | Dec. 23, 2024, 12:17 p.m. |
| Headline | Your NVMe Had Been Syz’ed: Fuzzing NVMe-oF/TCP Driver for Linux with Syzkaller |
| Title | Your NVMe Had Been Syz’ed: Fuzzing NVMe-oF/TCP Driver for Linux with Syzkaller |
| Detected Hints/Tags/Attributes | 60/1/42 |
Source URLs
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | CVE | 5 | cve-2023-5178 |
|
| Details | CVE | 1 | cve-2023-6121 |
|
| Details | CVE | 1 | cve-2023-6536 |
|
| Details | CVE | 1 | cve-2023-6356 |
|
| Details | CVE | 1 | cve-2023-6535 |
|
| Details | Domain | 31 | www.cyberark.com |
|
| Details | Domain | 4702 | github.com |
|
| Details | Domain | 144 | owasp.org |
|
| Details | Domain | 5 | google.github.io |
|
| Details | Domain | 1 | coverage.md |
|
| Details | Domain | 2 | blog.isosceles.com |
|
| Details | Domain | 13 | elixir.bootlin.com |
|
| Details | Domain | 29 | man7.org |
|
| Details | Domain | 25 | kernel.org |
|
| Details | Domain | 30 | www.kernel.org |
|
| Details | Domain | 1 | pwning.tech |
|
| Details | File | 2 | msg.msg |
|
| Details | File | 1 | nvme_socket.cfg |
|
| Details | File | 2 | blog.iso |
|
| Details | File | 1 | 02-ratified.pdf |
|
| Details | File | 7 | 7.html |
|
| Details | File | 1 | kcov.html |
|
| Details | Github username | 39 | ||
| Details | Github username | 22 | torvalds |
|
| Details | sha1 | 1 | fa69ee5aa48b5b52e8028c2eb486906e9998d081 |
|
| Details | IPv4 | 1576 | 127.0.0.1 |
|
| Details | IPv4 | 676 | 0.0.0.0 |
|
| Details | Url | 1 | https://www.cyberark.com/resources/threat-research-blog/nvme-new-vulnerabilities-made-easy |
|
| Details | Url | 2 | https://github.com/google/syzkaller |
|
| Details | Url | 3 | https://owasp.org/www-community |
|
| Details | Url | 1 | https://google.github.io/clusterfuzz/reference/coverage-guided-vs-blackbox |
|
| Details | Url | 1 | https://github.com/google/syzkaller/blob/master/docs/coverage.md |
|
| Details | Url | 1 | https://blog.isosceles.com/how-to-build-a-corpus-for-fuzzing |
|
| Details | Url | 1 | https://elixir.bootlin.com/linux/v6.5/source/fs/open.c#l1426 |
|
| Details | Url | 1 | https://github.com/google/syzkaller/blob/master/docs/syscall_descriptions_syntax.md |
|
| Details | Url | 1 | https://nvmexpress.org/wp-content/uploads/nvm-express-tcp-transport-specification-2021.06.02-ratified.pdf |
|
| Details | Url | 2 | https://man7.org/linux/man-pages/man7/namespaces.7.html |
|
| Details | Url | 1 | https://github.com/google/syzkaller/blob/master/docs/pseudo_syscalls.md |
|
| Details | Url | 1 | https://www.kernel.org/doc/html/latest/dev-tools/kcov.html |
|
| Details | Url | 1 | https://github.com/torvalds/linux/commit/fa69ee5aa48b5b52e8028c2eb486906e9998d081 |
|
| Details | Url | 1 | https://elixir.bootlin.com/linux/v6.5/source/include/linux/skbuff.h#l5016 |
|
| Details | Url | 1 | https://pwning.tech/ksmbd-syzkaller |