CVE-2021-39263

CVE-2021-39263 is a vulnerability in NTFS-3G where a crafted NTFS image can trigger a heap-based buffer overflow due to an unsanitized attribute in ntfs_get_attribute_value. The issue is in NTFS-3G versions older than 2021.8.22. Reported impact includes potential heap buffer overflow when process...

Tuxera NTFS-3G Buffer Overflow Vulnerability (CNVD-2021-72273)

Tuxera NTFS-3G is Finland's Tuxera company's set of open source , cross-platform for supporting NTFS partition read and write drivers . NTFS-3G suffers from a buffer overflow vulnerability that can be exploited by an attacker to potentially cause a heap buffer overflow and allow arbitrary memory...

CVE-2021-33289

In NTFS-3G versions 2021.8.22, when a specially crafted MFT section is supplied in an NTFS image a heap buffer overflow can occur and allow for code execution...

CVE-2021-33286

NTFS-3G (Tuxera NTFS-3G) is affected for versions older than 2021.8.22. A heap-based overflow is triggered by a specially crafted Unicode string in an NTFS image, which can lead to code execution. The issue is explicitly associated with CVE-2021-33286 and is corroborated across multiple advisorie...

CVE-2021-35268

The CVE-2021-35268 issue affects NTFS-3G. A heap buffer overflow occurs in ntfs_inode_real_open when a specially crafted NTFS inode is loaded, enabling potential code execution and privilege escalation. This vulnerability affects NTFS-3G versions older than 2021.8.22. Public advisories and vendor...

CVE-2021-33289

NTFS-3G prior to version 2021.8.22 is vulnerable to a heap buffer overflow when processing a specially crafted MFT section in an NTFS image, allowing potential code execution. Connected advisories from Astra Linux, Debian (DSA-4971-1, DLA-2819-1), Alpine (CVE-2021-33289) and others confirm the is...

CVE-2021-39258

A crafted NTFS image can cause out-of-bounds reads in ntfsattrfind and ntfsexternalattrfind in NTFS-3G 2021.8.22...

Tuxera NTFS-3G Buffer Overflow Vulnerability (CNVD-2021-72272)

Tuxera NTFS-3G is Finland's Tuxera company's set of open source , cross-platform for supporting NTFS partition read and write drivers . The Tuxera NTFS-3G buffer overflow vulnerability can be exploited by an attacker to potentially cause a heap buffer overflow, which could lead to a memory leak,...

CVE-2021-39260

CVE-2021-39260 affects NTFS-3G with an out-of-bounds access in ntfs_inode_sync_standard_information when processing a crafted NTFS image. The description indicates NTFS-3G versions prior to 2021.8.22 are vulnerable. Connected advisories reference remediation by upgrading to 2021.8.22 or newer (e....

Tuxera NTFS-3G Buffer Overflow Vulnerability (CNVD-2021-72266)

Tuxera NTFS-3G is Finland's Tuxera company's set of open source , cross-platform for supporting NTFS partition read and write drivers . A security vulnerability exists in NTFS-3G that originates from an application's improper validation of certain NTFS metadata, which can be exploited by an...

Tuxera NTFS-3G Buffer Overflow Vulnerability (CNVD-2021-72274)

Tuxera NTFS-3G is Finland's Tuxera company's set of open source , cross-platform for supporting NTFS partition read and write drivers . NTFS-3G suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause a heap-based buffer overflow in ntfsinodelookupbyname in NTFS-...

CVE-2021-35266

NTFS-3G vulnerability CVE-2021-35266 affects versions

CVE-2021-39260

A crafted NTFS image can cause an out-of-bounds access in ntfsinodesyncstandardinformation in NTFS-3G 2021.8.22...

CVE-2021-39259

CVE-2021-39259 affects NTFS-3G: a crafted NTFS image can trigger an out-of-bounds access due to an unsanitized attribute length in ntfs_inode_lookup_by_name (NTFS-3G

CVE-2021-39252

NTFS-3G is affected by CVE-2021-39252: an out-of-bounds read in ntfs_ie_lookup for NTFS-3G versions prior to 2021.8.22. Several advisories and security trackers map this CVE to ntfs-3g in multiple distributions. Remediation: upgrade ntfs-3g to 2021.8.22 or later (e.g., 2021.8.22-1 or newer) as in...

CVE-2021-39257

CVE-2021-39257 affects NTFS-3G, where a crafted NTFS image with an unallocated bitmap can trigger an endless recursive call chain starting at ntfs_attr_pwrite, causing stack consumption. Documented impact is a stack exhaustion condition in NTFS-3G

CVE-2021-35266

In NTFS-3G versions 2021.8.22, when a specially crafted NTFS inode pathname is supplied in an NTFS image a heap buffer overflow can occur resulting in memory disclosure, denial of service and even code execution...

CVE-2021-39257

A crafted NTFS image with an unallocated bitmap can lead to a endless recursive function call chain starting from ntfsattrpwrite, causing stack consumption in NTFS-3G 2021.8.22...

CVE-2021-39261

A crafted NTFS image can cause a heap-based buffer overflow in ntfscompressedpwrite in NTFS-3G 2021.8.22...

Security update for ntfs-3g_ntfsprogs (important)

openSUSE Security Update: Security update for ntfs-3gntfsprogs Announcement ID: openSUSE-SU-2021:2971-1 Rating: important References: 1189720 Cross-References: CVE-2019-9755 CVE-2021-33285 CVE-2021-33286 CVE-2021-33287 CVE-2021-33289 CVE-2021-35266 CVE-2021-35267 CVE-2021-35268 CVE-2021-35269...