CVE-2021-33285

In NTFS-3G versions 2021.8.22, when a specially crafted NTFS attribute is supplied to the function ntfsgetattributevalue, a heap buffer overflow can occur allowing for memory disclosure or denial of service. The vulnerability is caused by an out-of-bound buffer access which can be triggered by...

CVE-2021-39262

CVE-2021-39262 affects NTFS-3G prior to 2021.8.22, enabling a crafted NTFS image to trigger an out-of-bounds access in the ntfs_decompress function. Public advisories across multiple distributions (Debian, Alpine, AlmaLinux, etc.) indicate a fix in or after version 2021.8.22. Affected packages in...

CVE-2021-39255

NTFS-3G vulnerable: crafted NTFS images can trigger an out-of-bounds read due to an invalid attribute in ntfs_attr_find_in_attrdef in NTFS-3G versions prior to 2021.8.22. Affected product: ntfs-3g. Impact: information disclosure/possible crash from out-of-bounds read (local impact per CVE). Remed...

CVE-2021-33287

In NTFS-3G versions 2021.8.22, when specially crafted NTFS attributes are read in the function ntfsattrpreadi, a heap buffer overflow can occur and allow for writing to arbitrary memory or denial of service of the application...

CVE-2021-35267

NTFS-3G versions 2021.8.22, a stack buffer overflow can occur when correcting differences in the MFT and MFTMirror allowing for code execution or escalation of privileges when setuid-root...

CVE-2021-35269

NTFS-3G versions 2021.8.22, when a specially crafted NTFS attribute from the MFT is setup in the function ntfsattrsetupflag, a heap buffer overflow can occur allowing for code execution and escalation of privileges...

CVE-2021-39256

A crafted NTFS image can cause a heap-based buffer overflow in ntfsinodelookupbyname in NTFS-3G 2021.8.22...

CVE-2021-39260

A crafted NTFS image can cause an out-of-bounds access in ntfsinodesyncstandardinformation in NTFS-3G 2021.8.22...

CVE-2021-39252

A crafted NTFS image can cause an out-of-bounds read in ntfsielookup in NTFS-3G 2021.8.22...

CVE-2021-39259

A crafted NTFS image can trigger an out-of-bounds access, caused by an unsanitized attribute length in ntfsinodelookupbyname, in NTFS-3G 2021.8.22...

CVE-2021-33286

In NTFS-3G versions 2021.8.22, when a specially crafted unicode string is supplied in an NTFS image a heap buffer overflow can occur and allow for code execution...

CVE-2021-35268

In NTFS-3G versions 2021.8.22, when a specially crafted NTFS inode is loaded in the function ntfsinoderealopen, a heap buffer overflow can occur allowing for code execution and escalation of privileges...

CVE-2021-39255

A crafted NTFS image can trigger an out-of-bounds read, caused by an invalid attribute in ntfsattrfindinattrdef, in NTFS-3G 2021.8.22...

CVE-2021-39258

A crafted NTFS image can cause out-of-bounds reads in ntfsattrfind and ntfsexternalattrfind in NTFS-3G 2021.8.22...

CVE-2021-39256

CVE-2021-39256 describes a heap-based buffer overflow in ntfs_inode_lookup_by_name within NTFS-3G. The issue affects NTFS-3G prior to version 2021.8.22 when processing a crafted NTFS image, potentially enabling exploitation via local interaction. Connected advisories confirm this vulnerability in...

Security update for ntfs-3g_ntfsprogs (important)

openSUSE Security Update: Security update for ntfs-3gntfsprogs Announcement ID: openSUSE-SU-2021:2971-1 Rating: important References: 1189720 Cross-References: CVE-2019-9755 CVE-2021-33285 CVE-2021-33286 CVE-2021-33287 CVE-2021-33289 CVE-2021-35266 CVE-2021-35267 CVE-2021-35268 CVE-2021-35269...

Tuxera NTFS-3G Buffer Overflow Vulnerability (CNVD-2021-72275)

Tuxera NTFS-3G is Finland's Tuxera company's set of open source , cross-platform for supporting NTFS partition read and write drivers . NTFS-3G suffers from a buffer overflow vulnerability that can be exploited by attackers to potentially trigger out-of-bounds access via a crafted NTFS image...

CVE-2021-39254

A crafted NTFS image can cause an integer overflow in memmove, leading to a heap-based buffer overflow in the function ntfsattrrecordresize, in NTFS-3G 2021.8.22...

CVE-2021-39251

A crafted NTFS image can cause a NULL pointer dereference in ntfsextentinodeopen in NTFS-3G 2021.8.22...

CVE-2021-39263

CVE-2021-39263 is a vulnerability in NTFS-3G where a crafted NTFS image can trigger a heap-based buffer overflow due to an unsanitized attribute in ntfs_get_attribute_value. The issue is in NTFS-3G versions older than 2021.8.22. Reported impact includes potential heap buffer overflow when process...