PT-2023-9681 · Grub · Grub

Name of the Vulnerable Software and Affected Versions: GRUB affected versions not specified Description: The issue is related to a buffer overflow when reading memory in the NTFS driver of the GRUB operating system loader. Exploitation of this issue may allow an attacker to read the contents of t...

[SECURITY] Fedora 35 Update: ntfs-3g-2022.10.3-1.fc35

NTFS-3G is a stable, open source, GPL licensed, POSIX, read/write NTFS driver for Linux and many other operating systems. It provides safe handling of the Windows XP, Windows Server 2003, Windows 2000, Windows Vista, Windows Server 2008 and Windows 7 NTFS file systems. NTFS-3G can create, remove,...

The vulnerability of the `ntfsattr_pread_i` function in the NTFS file system driver for the FUSE NTFS-3G module, related to writing beyond the buffer boundary, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ntfsattrpreadi function in the NTFS file system driver for the FUSE NTFS-3G module is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the `ntfsattr_setup_flag` function in the NTFS file system driver for the FUSE NTFS-3G module involves insecure privilege management. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ntfsattrsetupflag function in the NTFS file system driver for the FUSE NTFS-3G module is related to insecure privilege management. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

ntfs-3g: Out-of-bounds read in ntfs_runlists_merge_i()

The ntfs3g package is susceptible to an input validation flaw. When processing a crafted NTFS image there is an improper check which leads to an out of bounds read. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

Tuxera NTFS-3G Out-of-Bounds Read Vulnerability (CNVD-2021-72262)

NTFS-3G is a stable, full-featured, read/write NTFS driver for Linux, Android, Mac OS X, FreeBSD, NetBSD, OpenSolaris, QNX, Haiku and other operating systems. An out-of-bounds read vulnerability exists in ntfsielookup in versions prior to NTFS-3G 2021.8.22. An attacker can exploit this...

Tuxera NTFS-3G null pointer dereference vulnerability

NTFS-3G is a stable, full-featured, read/write NTFS driver for Linux, Android, Mac OS X, FreeBSD, NetBSD, OpenSolaris, QNX, Haiku, and other operating systems. ntfs extentinodeopen is vulnerable to a null pointer dereference. An attacker could exploit the vulnerability to cause null pointer...

[SECURITY] Fedora 33 Update: ntfs-3g-2021.8.22-1.fc33

NTFS-3G is a stable, open source, GPL licensed, POSIX, read/write NTFS driver for Linux and many other operating systems. It provides safe handling of the Windows XP, Windows Server 2003, Windows 2000, Windows Vista, Windows Server 2008 and Windows 7 NTFS file systems. NTFS-3G can create, remove,...

CVE-2021-33285

In NTFS-3G versions 2021.8.22, when a specially crafted NTFS attribute is supplied to the function ntfsgetattributevalue, a heap buffer overflow can occur allowing for memory disclosure or denial of service. The vulnerability is caused by an out-of-bound buffer access which can be triggered by...

Tuxera NTFS-3G 缓冲区错误漏洞

Tuxera NTFS-3G is an open source, cross-platform set of drivers from Tuxera Finland for reading and writing NTFS partitions.Tuxera NTFS-3G is vulnerable to a buffer overflow vulnerability that could be exploited by an attacker to crash a program or execute arbitrary code in the application contex...

The vulnerability of the ntfs.sys driver in Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the ntfs.sys driver in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to increase their privileges...

Windows 10 - SET_REPARSE_POINT_EX Mount Point Security Feature Bypass

Windows 10 - SETREPARSEPOINTEX Mount Point Security Feature Bypass Windows: SETREPARSEPOINTEX Mount Point Security Feature Bypass Platform: Windows 10 1903, 1809 not tested earlier Class: Security Feature Bypass Summary: The NTFS driver supports a new FS control code to set a mount point which th...

Microsoft Windows 10 - SET_REPARSE_POINT_EX Mount Point Security Feature Bypass

Windows: SETREPARSEPOINTEX Mount Point Security Feature Bypass Platform: Windows 10 1903, 1809 not tested earlier Class: Security Feature Bypass Summary: The NTFS driver supports a new FS control code to set a mount point which the existing sandbox mitigation doesn’t support allowing a sandboxed...

[SECURITY] Fedora 28 Update: ntfs-3g-2017.3.23-11.fc28

NTFS-3G is a stable, open source, GPL licensed, POSIX, read/write NTFS driver for Linux and many other operating systems. It provides safe handling of the Windows XP, Windows Server 2003, Windows 2000, Windows Vista, Windows Server 2008 and Windows 7 NTFS file systems. NTFS-3G can create, remove,...

[SECURITY] Fedora 29 Update: ntfs-3g-2017.3.23-11.fc29

NTFS-3G is a stable, open source, GPL licensed, POSIX, read/write NTFS driver for Linux and many other operating systems. It provides safe handling of the Windows XP, Windows Server 2003, Windows 2000, Windows Vista, Windows Server 2008 and Windows 7 NTFS file systems. NTFS-3G can create, remove,...

[SECURITY] Fedora 30 Update: ntfs-3g-2017.3.23-11.fc30

NTFS-3G is a stable, open source, GPL licensed, POSIX, read/write NTFS driver for Linux and many other operating systems. It provides safe handling of the Windows XP, Windows Server 2003, Windows 2000, Windows Vista, Windows Server 2008 and Windows 7 NTFS file systems. NTFS-3G can create, remove,...

USN-3914-1: NTFS-3G vulnerability

A heap buffer overflow was discovered in NTFS-3G when executing it with a relative mount point path that is too long. A local attacker could potentially exploit this to execute arbitrary code as the administrator...

Linux kernel memory misreference vulnerability (CNVD-2018-16259)

Linux kernel is the kernel used by Linux, an open source operating system released by the Linux Foundation in the U.S. The ntfs.ko filesystem driver is one of the drivers that supports the NTFS filesystem. A memory misreference vulnerability exists in the 'ntfsreadlockedinode' function of the...

DEBIAN-CVE-2018-12929

ntfsreadlockedinode in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a use-after-free read and possibly cause a denial of service kernel oops or panic via a crafted ntfs filesystem...

PT-2018-11487

Name of the Vulnerable Software and Affected Versions Linux kernel version 4.15.0 Description The issue is related to the ntfs read locked inode function in the ntfs.ko filesystem driver, which allows attackers to trigger a use-after-free read. This could potentially cause a denial of service,...