Integer overflow

An integer underflow in fuselibreaddir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite...

CVE-2022-30783

An invalid return code in fusekernmount enables intercepting of libfuse-lite protocol traffic between NTFS-3G and the kernel in NTFS-3G through 2021.8.22 when using libfuse-lite...

CVE-2022-30787

CVE-2022-30787 affects NTFS-3G when using libfuse-lite, caused by an integer underflow in fuse_lib_readdir that enables arbitrary memory reads. The issue is tied to NTFS-3G up through 2021.8.22. Multiple advisories (Debian DLA/DSA, Alpine, CNVD, etc.) document this CVE and list fixes in newer NTF...

CVE-2022-30787

An integer underflow in fuselibreaddir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite...

CVE-2022-30783

An invalid return code in fusekernmount enables intercepting of libfuse-lite protocol traffic between NTFS-3G and the kernel in NTFS-3G through 2021.8.22 when using libfuse-lite...

CVE-2022-30785

A file handle created in fuselibopendir, and later used in fuselibreaddir, enables arbitrary memory read and write operations in NTFS-3G through 2021.8.22 when using libfuse-lite...

CVE-2022-30787

An integer underflow in fuselibreaddir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite...

CVE-2022-30787

An integer underflow in fuselibreaddir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite...

CVE-2022-30783

An invalid return code in fusekernmount enables intercepting of libfuse-lite protocol traffic between NTFS-3G and the kernel in NTFS-3G through 2021.8.22 when using libfuse-lite...

CVE-2022-30787

An integer underflow in fuselibreaddir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite...

CVE-2022-30785

A file handle created in fuselibopendir, and later used in fuselibreaddir, enables arbitrary memory read and write operations in NTFS-3G through 2021.8.22 when using libfuse-lite...

CVE-2022-30785

NTFS-3G contains a local memory read/write vulnerability triggered by a file handle created in fuse_lib_opendir and later used in fuse_lib_readdir when using libfuse-lite. The issue affects NTFS-3G up to 2021.8.22 (through libfuse-lite) and can enable arbitrary memory access. Public exploit detai...

CVE-2022-30785

A file handle created in fuselibopendir, and later used in fuselibreaddir, enables arbitrary memory read and write operations in NTFS-3G through 2021.8.22 when using libfuse-lite...

CVE-2022-30783

An invalid return code in fusekernmount enables intercepting of libfuse-lite protocol traffic between NTFS-3G and the kernel in NTFS-3G through 2021.8.22 when using libfuse-lite...

CVE-2022-30783

CVE-2022-30783 affects NTFS-3G (libfuse-lite) via an invalid return code in fuse_kern_mount, enabling interception of libfuse-lite protocol traffic between NTFS-3G and the kernel. The issue exists in NTFS-3G up to 2021.8.22; multiple connected advisories note the vulnerability and provide remedia...

CVE-2022-30785

A file handle created in fuselibopendir, and later used in fuselibreaddir, enables arbitrary memory read and write operations in NTFS-3G through 2021.8.22 when using libfuse-lite...

PT-2022-3245 · Ntfs-3G +6 · Ntfs-3G +6

Name of the Vulnerable Software and Affected Versions: NTFS-3G versions through 2021.8.22 Description: The issue is related to a buffer overflow vulnerability in the NTFS file system descriptor for the FUSE NTFS-3G module, allowing arbitrary memory read and write operations. This can be exploited...

Mageia: Security Advisory (MGASA-2015-0239)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Uninitalized memory read & leak caused by fuser crate

During creation of new libfuse session with fusesessionnew operation list was passed as NULL incorrectly. libfuse expects this argument to always point to list of operations. This caused uninitialized memory read and leaks in libfuse.so...

RUSTSEC-2021-0154 Uninitalized memory read & leak caused by fuser crate

During creation of new libfuse session with fusesessionnew operation list was passed as NULL incorrectly. libfuse expects this argument to always point to list of operations. This caused uninitialized memory read and leaks in libfuse.so...