Medium: p7zip

Issue Overview: The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 for 7zz contains a heap-based buffer overflow that allows an attacker to overwrite two bytes at multiple offsets beyond the allocated buffer size: buffer+512i-2, for i=9, i=10, i=11, etc. CVE-2023-52168 The NtfsHandler.cpp NTF...

SUSE CVE-2024-42299

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Update log-pagemask,bits if log-pagesize changed If an NTFS file system is mounted to another system with different PAGESIZE from the original system, log-pagesize will change in logreplay, but log-pagemask,bits don't...

CVE-2024-42299

CVE-2024-42299 : In the Linux kernel, the NTFS3 file system handler (fs/ntfs3) fixes an issue where log->page_mask and log->page_bits were not updated when log->page_size changed during log_replay after mounting an NTFS filesystem on a system with a different PAGE_SIZE. This mismatch cou...

CVE-2024-42299

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Update log-pagemask,bits if log-pagesize changed If an NTFS file system is mounted to another system with different PAGESIZE from the original system, log-pagesize will change in logreplay, but log-pagemask,bits don't...

CVE-2024-42299 fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Update log-pagemask,bits if log-pagesize changed If an NTFS file system is mounted to another system with different PAGESIZE from the original system, log-pagesize will change in logreplay, but log-pagemask,bits don't...

CVE-2024-42299 fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Update log-pagemask,bits if log-pagesize changed If an NTFS file system is mounted to another system with different PAGESIZE from the original system, log-pagesize will change in logreplay, but log-pagemask,bits don't...

CVE-2024-42299 fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Update log-pagemask,bits if log-pagesize changed If an NTFS file system is mounted to another system with different PAGESIZE from the original system, log-pagesize will change in logreplay, but log-pagemask,bits don't...

CVE-2024-38117

NTFS Elevation of Privilege Vulnerability...

CVE-2024-38117 NTFS Elevation of Privilege Vulnerability

...

CVE-2024-38117 NTFS Elevation of Privilege Vulnerability

...

CVE-2024-38117

CVE-2024-38117 affects the Windows NTFS component and is labeled as an elevation-of-privilege vulnerability with the impact “Obtaining Increased Rights” and a CVSS v3.1 base score of 7.8 (High). The connected documents provide the impact and the component but do not disclose the exact root cause ...

NTFS Elevation of Privilege Vulnerability

...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : p7zip (SUSE-SU-2024:2625-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2625-1 advisory. - CVE-2023-52168: Fixed heap-based buffer overflow in the NTFS handler allows two bytes to be...

Microsoft Windows NTFS Junction Heap-based Buffer Overflow Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of NT...

SUSE-SU-2024:2625-1 Security update for p7zip

This update for p7zip fixes the following issues: - CVE-2023-52168: Fixed heap-based buffer overflow in the NTFS handler allows two bytes to be overwritten at multiple offsets bsc1227358 - CVE-2023-52169: Fixed out-of-bounds read in NTFS handler bsc1227359...

DEBIAN-CVE-2024-41019

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Validate ff offset This adds sanity checks for ff offset. There is a check on rt-firstfree at first, but walking through by ff without any check. If the second ff is a large offset. We may encounter an out-of-bound read...

CVE-2024-41018

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add a check for attrnames and oatbl Added out-of-bound checking for ane ATTRNAMEENTRY...

CVE-2023-52890 affecting package ntfs-3g for versions less than 2022.10.3-2

CVE-2023-52890 affecting package ntfs-3g for versions less than 2022.10.3-2. A patched version of the package is available...

CLSA-2024-1721204317 grub2: Fix of 2 CVEs

CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driver...

SUSE SLES12 Security Update : p7zip (SUSE-SU-2024:2475-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2475-1 advisory. - CVE-2023-52168: Fixed heap-based buffer overflow in the NTFS handler allows two bytes to be overwritten at multiple offsets...