SUSE CVE-2021-46790

ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+5123-2. NOTE: the upstream position is that ntfsck is deprecated; however, it is shipped by some Linux distributions...

SUSE CVE-2022-30784

A crafted NTFS image can cause heap exhaustion in ntfsgetattributevalue in NTFS-3G through 2021.8.22...

SUSE CVE-2022-30787

An integer underflow in fuselibreaddir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite...

GLSA-202301-01 : NTFS-3G: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202301-01 NTFS-3G: Multiple Vulnerabilities - In NTFS-3G versions 2021.8.22, when a specially crafted NTFS attribute is supplied to the function ntfsgetattributevalue, a heap buffer overflow can occur allowing for memory disclosur...

NTFS-3G: Multiple Vulnerabilities

Background NTFS-3G is a stable, full-featured, read-write NTFS driver for various operating systems. Description Multiple vulnerabilities have been discovered in NTFS-3G. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for detail...

[SECURITY] Fedora 37 Update: ntfs-3g-2022.10.3-1.fc37

NTFS-3G is a stable, open source, GPL licensed, POSIX, read/write NTFS driver for Linux and many other operating systems. It provides safe handling of the Windows XP, Windows Server 2003, Windows 2000, Windows Vista, Windows Server 2008 and Windows 7 NTFS file systems. NTFS-3G can create, remove,...

Fedora 36 : ntfs-3g (2022-4915124227)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-4915124227 advisory. Update to 2022.10.3. Fixes CVE-2022-40284 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...

Fedora: Security Advisory for ntfs-3g (FEDORA-2022-243616c548)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 35 : ntfs-3g (2022-14f11bfc73)

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-14f11bfc73 advisory. Update to 2022.10.3. Fixes CVE-2022-40284 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...

CVE-2022-40284 affecting package ntfs-3g for versions less than 2022.10.3-1

CVE-2022-40284 affecting package ntfs-3g for versions less than 2022.10.3-1. An upgraded version of the package is available that resolves this issue...

[SECURITY] Fedora 36 Update: ntfs-3g-2022.10.3-1.fc36

NTFS-3G is a stable, open source, GPL licensed, POSIX, read/write NTFS driver for Linux and many other operating systems. It provides safe handling of the Windows XP, Windows Server 2003, Windows 2000, Windows Vista, Windows Server 2008 and Windows 7 NTFS file systems. NTFS-3G can create, remove,...

Fedora: Security Advisory for ntfs-3g (FEDORA-2022-4915124227)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for ntfs-3g (FEDORA-2022-14f11bfc73)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

DLA-3201-1 ntfs-3g - security update

Bulletin has no description...

Debian dla-3201 : libntfs-3g883 - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3201 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3201-1 [email protected] https://www.debian.org/lts/security/...

Debian: Security Advisory (DLA-3201-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3201-1] ntfs-3g security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3201-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz November 22, 2022 https://wiki.debian.org/LTS -...

Mageia: Security Advisory (MGASA-2022-0408)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-40284

A buffer overflow was discovered in NTFS-3G before 2022.10.3. Crafted metadata in an NTFS image can cause code execution. A local attacker can exploit this if the ntfs-3g binary is setuid root. A physically proximate attacker can exploit this if NTFS-3G software is configured to execute upon...

AZL-11388 CVE-2022-40284 affecting package ntfs-3g for versions less than 2022.10.3-1

A buffer overflow was discovered in NTFS-3G before 2022.10.3. Crafted metadata in an NTFS image can cause code execution. A local attacker can exploit this if the ntfs-3g binary is setuid root. A physically proximate attacker can exploit this if NTFS-3G software is configured to execute upon...