45 matches found
CVE-2024-50244 fs/ntfs3: Additional check in ni_clear()
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Additional check in niclear Checking of NTFSFLAGSLOGREPLAYING added to prevent access to uninitialized bitmap during replay process...
The vulnerability of the NTFS handler in the NtfsHandler.cpp file of the 7-Zip archive viewer allows a hacker to execute arbitrary code.
The vulnerability of the NTFS handler in the NtfsHandler.cpp file of the 7-Zip archive creator is related to the possibility of buffer overflow attacks. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2023-4692 Grub2: out-of-bounds write at fs/ntfs.c may lead to unsigned code execution
An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow an attacker to present a specially crafted NTFS filesystem image, leading to grub's heap metadata corruption. In some circumstances, the attack may also corrupt the UEFI firmware heap metadata. As a...
CVE-2023-29346
NTFS Elevation of Privilege Vulnerability...
ntfs-3g: heap-based buffer overflow in ntfsck
A vulnerability was found in NTFS-3G, specifically in the ntfsck utility. Incorrect validation of NTFS metadata can result in a heap-based buffer overflow when processing a crafted NTFS image file or partition...
PT-2023-33546 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 6.0.17 Description: A potential issue exists in the fs/ntfs3 component, specifically in the ntfs read mft function, where a duplicate condition is deleted. The actual impact and attack plausibility of this issue...
PT-2022-36580 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.334 Description: The issue is related to an overflow when iterating ATTR RECORDs in ntfs. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior...
Linux kernel 资源管理错误漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the U.S. umount is a software package used to uninstall devices in Unix platforms. Linux kernel suffers from a security vulnerability that stems from a double-release flaw found in the NTFS3...
ALPINE-CVE-2022-30784
A crafted NTFS image can cause heap exhaustion in ntfsgetattributevalue in NTFS-3G through 2021.8.22...
UBUNTU-CVE-2022-30789
A crafted NTFS image can cause a heap-based buffer overflow in ntfschecklogclientarray in NTFS-3G through 2021.8.22...
Tuxera NTFS-3G 代码注入漏洞
Tuxera NTFS-3G is an open-source, cross-platform set of drivers from Tuxera Finland for supporting read and write NTFS partitions.A code injection vulnerability exists in Tuxera NTFS-3G, which stems from the presence of an invalid return code in fusekernmount. No detailed vulnerability details ar...
The vulnerability of the Windows Media Center component of the Windows operating system, which allows a hacker to gain elevated privileges
The vulnerability of the NTFS file system in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to increase their privileges...
A crafted NTFS image can cause a heap-based buffer overflow in ntfs_inode_lookup_by_name in NTFS-3G < 2021.8.22.
...
A crafted NTFS image can cause an out-of-bounds read in ntfs_ie_lookup in NTFS-3G < 2021.8.22.
...
CVE-2021-43240
NTFS Set Short Name Elevation of Privilege Vulnerability...
ntfs-3g: Heap buffer overflow in ntfs_compressed_pwrite()
The ntfs3g package is susceptible to a heap overflow on crafted input. When processing an NTFS image, proper bounds checking was not enforced leading to this software flaw. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...
AZL-6767 CVE-2021-39262 affecting package ntfs-3g for versions less than 2021.8.22-1
A crafted NTFS image can cause an out-of-bounds access in ntfsdecompress in NTFS-3G 2021.8.22...
UBUNTU-CVE-2021-39253
A crafted NTFS image can cause an out-of-bounds read in ntfsrunlistsmergei in NTFS-3G 2021.8.22...
AZL-6748 CVE-2021-33285 affecting package ntfs-3g for versions less than 2021.8.22-1
In NTFS-3G versions 2021.8.22, when a specially crafted NTFS attribute is supplied to the function ntfsgetattributevalue, a heap buffer overflow can occur allowing for memory disclosure or denial of service. The vulnerability is caused by an out-of-bound buffer access which can be triggered by...