NTFS-3G before 75dcdc2 has a use-after-free in ntfs_uppercase_mbs in libntfs-3g/unistr.c. NOTE: discussion suggests that exploitation would be challenging.

🗓️ 30 Jun 2024 14:00:00Reported by MicrosoftType

NTFS-3G prior to commit 75dcdc2 has a use-after-free in ntfs_uppercase_mbs in the unistr module.

Reporter	Title	Published	Views	Family All 34
AstraLinux	Astra Linux – Vulnerability in ntfs-3g, Containerd-app	20 May 202605:53	–	astralinux
Tenable Nessus	Azure Linux 3.0 Security Update: ntfs-3g (CVE-2023-52890)	10 Feb 202500:00	–	nessus
Tenable Nessus	CBL Mariner 2.0 Security Update: ntfs-3g (CVE-2023-52890)	3 Jul 202400:00	–	nessus
Tenable Nessus	SUSE SLED12 / SLES12 Security Update : ntfs-3g_ntfsprogs (SUSE-SU-2024:2074-1)	19 Jun 202400:00	–	nessus
Tenable Nessus	TencentOS Server 4: ntfs-3g (TSSA-2024:0504)	20 Nov 202500:00	–	nessus
Tenable Nessus	Ubuntu 22.04 LTS / 24.04 LTS / 25.10 : NTFS-3G vulnerabilities (USN-8192-1)	22 Apr 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2023-52890	27 Aug 202500:00	–	nessus
BDU FSTEC	The vulnerability of the NTFS-3G driver set-up allows a hacker to cause a failure in the recorded data.	12 Dec 202400:00	–	bdu_fstec
CBLMariner	CVE-2023-52890 affecting package ntfs-3g for versions less than 2022.10.3-2	23 Jul 202422:05	–	cbl_mariner
CBLMariner	CVE-2023-52890 affecting package ntfs-3g for versions less than 2022.10.3-2	28 Jun 202417:07	–	cbl_mariner