GLSA-202301-01 : NTFS-3G: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202301-01 NTFS-3G: Multiple Vulnerabilities - In NTFS-3G versions 2021.8.22, when a specially crafted NTFS attribute is supplied to the function ntfsgetattributevalue, a heap buffer overflow can occur allowing for memory disclosur...

NTFS-3G: Multiple Vulnerabilities

Background NTFS-3G is a stable, full-featured, read-write NTFS driver for various operating systems. Description Multiple vulnerabilities have been discovered in NTFS-3G. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for detail...

PT-2025-54101

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential null-pointer dereference issue exists in the ni clear function within the fs/ntfs3 component. A previous commit addressed a similar issue in ni write inode, but the fix was n...

PT-2025-37558

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.0.0-rc7 Description: A use-after-free vulnerability exists in the Linux kernel's NTFS3 filesystem, specifically within the indx get root function. The vulnerability is due to a missing length check, potentiall...

CVE-2019-9579

An issue was discovered in Illumos in Nexenta NexentaStor 4.0.5 and 5.1.2, and other products. The SMB server allows an attacker to have unintended access, e.g., an attacker with WRITEXATTR can change permissions. This occurs because of a combination of three factors: ZFS extended attributes are...

[SECURITY] Fedora 37 Update: ntfs-3g-2022.10.3-1.fc37

NTFS-3G is a stable, open source, GPL licensed, POSIX, read/write NTFS driver for Linux and many other operating systems. It provides safe handling of the Windows XP, Windows Server 2003, Windows 2000, Windows Vista, Windows Server 2008 and Windows 7 NTFS file systems. NTFS-3G can create, remove,...

Fedora 36 : ntfs-3g (2022-4915124227)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-4915124227 advisory. Update to 2022.10.3. Fixes CVE-2022-40284 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...

Fedora: Security Advisory for ntfs-3g (FEDORA-2022-243616c548)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 35 : ntfs-3g (2022-14f11bfc73)

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-14f11bfc73 advisory. Update to 2022.10.3. Fixes CVE-2022-40284 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...

CVE-2022-40284 affecting package ntfs-3g for versions less than 2022.10.3-1

CVE-2022-40284 affecting package ntfs-3g for versions less than 2022.10.3-1. An upgraded version of the package is available that resolves this issue...

GSD-2022-1008327 ntfs: fix use-after-free in ntfs_attr_find()

ntfs: fix use-after-free in ntfsattrfind This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.334 by commit...

GSD-2022-1008326 ntfs: fix out-of-bounds read in ntfs_attr_find()

ntfs: fix out-of-bounds read in ntfsattrfind This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.334 by commit...

GSD-2022-1008325 ntfs: check overflow when iterating ATTR_RECORDs

ntfs: check overflow when iterating ATTRRECORDs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.334 by commit...

GSD-2022-1008273 ntfs: fix use-after-free in ntfs_attr_find()

ntfs: fix use-after-free in ntfsattrfind This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.300 by commit...

GSD-2022-1008272 ntfs: fix out-of-bounds read in ntfs_attr_find()

ntfs: fix out-of-bounds read in ntfsattrfind This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.300 by commit...

GSD-2022-1008271 ntfs: check overflow when iterating ATTR_RECORDs

ntfs: check overflow when iterating ATTRRECORDs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.300 by commit...

GSD-2022-1008206 ntfs: fix use-after-free in ntfs_attr_find()

ntfs: fix use-after-free in ntfsattrfind This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.267 by commit...

GSD-2022-1008205 ntfs: fix out-of-bounds read in ntfs_attr_find()

ntfs: fix out-of-bounds read in ntfsattrfind This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.267 by commit...

GSD-2022-1008204 ntfs: check overflow when iterating ATTR_RECORDs

ntfs: check overflow when iterating ATTRRECORDs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.267 by commit...

GSD-2022-1008125 ntfs: fix use-after-free in ntfs_attr_find()

ntfs: fix use-after-free in ntfsattrfind This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.225 by commit...