Heap-based Buffer Overflow

A crafted NTFS image can cause a heap-based buffer overflow in ntfsnamesfullcollate in NTFS-3G through 2021.8.22...

Integer Underflow

ntfs is vulnerable to integer underflow. The vulnerability exists in fuselibreaddir which allows an attacker to read arbitrary memory read operations in NTFS-3G when using libfuse-lite...

Buffer Overflow

ntfs-3g is vulnerable to buffer overflow. The vulnerability exists in ntfsmftrecalloc which allows an attacker to send a crafted NTFS image that can cause a heap-based buffer overflow...

Heap-based Buffer Overflow

A crafted NTFS image can cause a heap-based buffer overflow in ntfschecklogclientarray in NTFS-3G through 2021.8.22...

Unchecked Return Value

ntfs-3g is vulnerable to unchecked return value. The vulnerability exists due to an invalid return code in fusekernmount enables intercepting of libfuse-lite protocol traffic between NTFS-3G and the kernel in NTFS-3G when using libfuse-lite...

Buffer Overflow

A crafted NTFS image can cause heap exhaustion in ntfsgetattributevalue in NTFS-3G through 2021.8.22...

Privilege Escalation

ntfs-3g is vulnerable to privilege escalation. A file handle created in fuselibopendir, and later used in fuselibreaddir, enables arbitrary memory read and write operations in NTFS-3G when using libfuse-lite...

Ubuntu: Security Advisory (USN-5463-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5463-1: NTFS-3G vulnerabilities

It was discovered that NTFS-3G incorrectly handled the ntfsck tool. If a user or automated system were tricked into using ntfsck on a specially crafted disk image, a remote attacker could possibly use this issue to execute arbitrary code. CVE-2021-46790 Roman Fiedler discovered that NTFS-3G...

CVE-2022-30787

A vulnerability was found in NTFS-3G. An integer underflow in fuselibreaddir allows out-of-bounds read operations...

CVE-2022-30788

A vulnerability was found in NTFS-3G. Incorrect validation of NTFS metadata can result in a heap-based buffer overflow when processing a crafted NTFS image file or partition...

CVE-2022-30785

A vulnerability was found in NTFS-3G. A file handle created in fuselibopendir and later used in fuselibreaddir allows out-of-bounds read/write operations...

CVE-2022-30786

A vulnerability was found in NTFS-3G. Incorrect validation of NTFS metadata can result in a heap-based buffer overflow when processing a crafted NTFS image file or partition...

CVE-2022-30783

A vulnerability was found in NTFS-3G. An invalid return code in fusekernmount allows libfuse-lite protocol traffic between NTFS-3G and the kernel to be intercepted...

CVE-2022-30784

A vulnerability was found in NTFS-3G. Incorrect validation of NTFS metadata can result in a heap exhaustion when processing a crafted NTFS image file or partition...

CVE-2021-46790

A vulnerability was found in NTFS-3G, specifically in the ntfsck utility. Incorrect validation of NTFS metadata can result in a heap-based buffer overflow when processing a crafted NTFS image file or partition...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : NTFS-3G vulnerabilities (USN-5463-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5463-1 advisory. It was discovered that NTFS-3G incorrectly handled the ntfsck tool. If a user or automated system were tricked into using ntfsck ...

Tuxera NTFS-3G Code Injection Vulnerability (CNVD-2022-82648)

Tuxera NTFS-3G is an open source, cross-platform driver for reading and writing NTFS partitions from the Finnish company Tuxera.Tuxera NTFS-3G is vulnerable to code injection, which stems from the existence of arbitrary memory read and write issues in fuselibreaddir, and can be exploited by...

Tuxera NTFS-3G Buffer Overflow Vulnerability (CNVD-2022-82645)

Tuxera NTFS-3G is an open source, cross-platform set of drivers from Tuxera Finland for supporting read and write NTFS partitions.A buffer overflow vulnerability exists in Tuxera NTFS-3G, which stems from a boundary error in ntfschecklogclientarray when handling untrusted input, and could be...

Tuxera NTFS-3G Buffer Overflow Vulnerability (CNVD-2022-82647)

Tuxera NTFS-3G is an open source, cross-platform set of drivers from Tuxera Finland for supporting read and write NTFS partitions. tuxera NTFS-3G suffers from a buffer overflow vulnerability that stems from a boundary error in ntfsnamesfullcollate when handling untrusted input, which can be...