964 matches found
Rocky Linux 8 [CIQ] Security Update: hivex / hivex-debuginfo / hivex-debugsource / hivex-devel / etc Multiple Vulnerabilities (crlsa-2022_1759)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20221759 advisory. QEMU: virtio-net: heap use-after-free in virtionetreceivercu CVE-2021-3748 ntfs-3g: Out-of-bounds heap buffer access in ntfsgetattributevalue due to...
Rocky Linux 8 [CIQ] Security Update: hivex / hivex-debuginfo / hivex-debugsource / hivex-devel / etc Multiple Vulnerabilities (crlsa-2023_2757)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20232757 advisory. ntfs-3g: heap-based buffer overflow in ntfsck CVE-2021-46790 QEMU: VNC: integer underflow in vncclientcuttextext leads to CPU exhaustion CVE-2022-3165...
Rocky Linux 8 [CIQ] Security Update: hivex / hivex-debuginfo / hivex-debugsource / hivex-devel / etc Multiple Vulnerabilities (crlsa-2023_5264)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20235264 advisory. QEMU: VNC: improper I/O watch removal in TLS handshake can lead to remote unauthenticated denial of service CVE-2023-3354 NTFS-3G: buffer overflow issue in...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ntfs-3g (UTSA-2022-000915)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000915 advisory. A buffer overflow was discovered in NTFS-3G before 2022.10.3. Crafted metadata in an NTFS image can cause code execution. A local attacker can exploit this if the...
Updated ntfs-3g packages fix security vulnerabilities
Heap memory corruption when processing a corrupt or maliciously crafted filesystem. CVE-2026-42616 Heap memory corruption when copying index data from root to an index block in a corrupt or maliciously crafted filesystem. CVE-2026-42617 Single-byte heap buffer overflow when decompressing...
MGASA-2026-0424 Updated ntfs-3g packages fix security vulnerabilities
Heap memory corruption when processing a corrupt or maliciously crafted filesystem. CVE-2026-42616 Heap memory corruption when copying index data from root to an index block in a corrupt or maliciously crafted filesystem. CVE-2026-42617 Single-byte heap buffer overflow when decompressing...
Astra Linux – Vulnerability in ntfs-3g
A properly crafted NTFS image can lead to heap exhaustion in ntfsgetattributevalue in NTFS-3G from version 2021.8.22 onwards...
Astra Linux – Vulnerability in ntfs-3g
A properly crafted NTFS image can lead to a out-of-bounds read in ntfsrunlistsmergei in NTFS-3G 2021.8.22...
Astra Linux – Vulnerability in ntfs-3g
In NTFS-3G versions before version 2021.8.22, when a specially crafted NTFS inode pathname is provided in an NTFS image, a heap buffer overflow may occur, leading to memory disclosure, denial of service, and even code execution...
Astra Linux – Vulnerability in ntfs-3g
A properly crafted NTFS image can lead to a out-of-bounds access vulnerability in the ntfsdecompress function in NTFS-3G, version 2021.8.22...
Astra Linux – Vulnerability in ntfs-3g
A properly crafted NTFS image can lead to a NULL pointer dereference in ntfsextent inodeopen in NTFS-3G 2021.8.22...
Astra Linux – Vulnerability in ntfs-3g
A properly crafted NTFS image can lead to a out-of-bounds read in ntfsielookup in NTFS-3G before version 2021.8.22...
Astra Linux – Vulnerability in ntfs-3g
NTFS-3G versions prior to 2021.8.22 may experience a stack buffer overflow when correcting differences between the MFT Mounted File Table and MFTMirror. This can lead to code execution or an escalation of privileges when using the setuid-root account...
Astra Linux – Vulnerability in ntfs-3g
In NTFS-3G versions 2021.8.22, when specially crafted NTFS attributes are read in the function ntfsattrpreadi, a heap buffer overflow can occur, allowing for writing to arbitrary memory or causing denial of service for the application...
Astra Linux – Vulnerability in ntfs-3g
In NTFS-3G versions before version 2021.8.22, when a specially crafted Unicode string is provided in an NTFS image, a heap buffer overflow may occur, allowing code execution...
Astra Linux – Vulnerability in ntfs-3g
A properly crafted NTFS image can cause a heap-based buffer overflow in ntfschecklogclientarray in NTFS-3G from version 2021.8.22 onwards...
Astra Linux – Vulnerability in ntfs-3g
A properly crafted NTFS image can lead to a heap-based buffer overflow in the ntfsnamesfullcollate function in NTFS-3G from 2021.8.22 onwards...
Astra Linux – Vulnerability in ntfs-3g
An integer underflow in fuselibreaddir allows for arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite...
