CVE-2023-52890

2024-06-1304:15:15

Debian Security Bug Tracker

security-tracker.debian.org

ntfs-3g

use-after-free

exploitation

unix

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

NTFS-3G before 75dcdc2 has a use-after-free in ntfs_uppercase_mbs in libntfs-3g/unistr.c. NOTE: discussion suggests that exploitation would be challenging.

OSVersionArchitecturePackageVersionFilename
Debian12allntfs-3g<= 1:2022.10.3-1ntfs-3g_1:2022.10.3-1_all.deb
Debian11allntfs-3g<= 1:2017.3.23AR.3-4+deb11u3ntfs-3g_1:2017.3.23AR.3-4+deb11u3_all.deb
Debian10allntfs-3g<= 1:2017.3.23AR.3-3+deb10u2ntfs-3g_1:2017.3.23AR.3-3+deb10u2_all.deb
Debian999allntfs-3g< 1:2022.10.3-3ntfs-3g_1:2022.10.3-3_all.deb
Debian13allntfs-3g< 1:2022.10.3-3ntfs-3g_1:2022.10.3-3_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	ntfs-3g	<= 1:2022.10.3-1	ntfs-3g_1:2022.10.3-1_all.deb
Debian	11	all	ntfs-3g	<= 1:2017.3.23AR.3-4+deb11u3	ntfs-3g_1:2017.3.23AR.3-4+deb11u3_all.deb
Debian	10	all	ntfs-3g	<= 1:2017.3.23AR.3-3+deb10u2	ntfs-3g_1:2017.3.23AR.3-3+deb10u2_all.deb
Debian	999	all	ntfs-3g	< 1:2022.10.3-3	ntfs-3g_1:2022.10.3-3_all.deb
Debian	13	all	ntfs-3g	< 1:2022.10.3-3	ntfs-3g_1:2022.10.3-3_all.deb