ROS-20221103-05

Vulnerability of the ntfs-3g utility of the NTFS-3G driver set of the NTFS file system implementation is related to errors in metadata processing. Exploitation of the vulnerability could allow an attacker to execute arbitrary code...

Denial Of Service (DoS)

ntfs-3g is vulnerable to denial of service. The vulnerability exists because of a buffer overflow due to incorrect validation of some of the NTFS metadata which allows an attacker to cause an application crash...

USN-5711-1: NTFS-3G vulnerability

Yuchen Zeng and Eduardo Vela discovered that NTFS-3G incorrectly validated certain NTFS metadata. A local attacker could possibly use this issue to gain privileges...

NTFS-3G 安全漏洞

Tuxera NTFS-3G is a set of open source, cross-platform drivers for NTFS partition read and write support from the Finnish company Tuxera. A security vulnerability exists in NTFS-3G that originates from incorrectly validating certain NTFS metadata. An attacker could gain privileges by exploiting...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : NTFS-3G vulnerability (USN-5711-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5711-1 advisory. Yuchen Zeng and Eduardo Vela discovered that NTFS-3G incorrectly validated certain NTFS metadata. A local attacker could possibly use this...

CVE-2022-40284

A buffer overflow was discovered in NTFS-3G before 2022.10.3. Crafted metadata in an NTFS image can cause code execution. A local attacker can exploit this if the ntfs-3g binary is setuid root. A physically proximate attacker can exploit this if NTFS-3G software is configured to execute upon...

Mageia: Security Advisory (MGASA-2022-0385)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2022-0385 Updated ntfs-3g packages fix security vulnerability

ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+5123-2. CVE-2021-46790 An invalid return code in fusekernmount enables intercepting of libfuse-lite protocol traffic between NTFS-3G and the kernel in NTFS-3G through 2021.8.22 when using libfuse-lite...

Updated ntfs-3g packages fix security vulnerability

ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+5123-2. CVE-2021-46790 An invalid return code in fusekernmount enables intercepting of libfuse-lite protocol traffic between NTFS-3G and the kernel in NTFS-3G through 2021.8.22 when using libfuse-lite...

SUSE-SU-2022:3495-1 Security update for libgit2

This update for libgit2 fixes the following issues: - Fixed DoS by oob write in constructed commit object with a very large number of parents bsc1158981. - CVE-2019-1352: Fixed git on Windows being unaware of NTFS Alternate Data Streams bnc1158790. - CVE-2022-24765: Fixed potential command...

PT-2025-53128

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the fs/ntfs3 component. A UBSAN Undefined Behavior Sanitizer error can occur in the true sectors per clst function, specifically due to a...

USN-5623-1 linux-hwe-5.15, linux-lowlatency-hwe-5.15 vulnerabilities

Asaf Modelevsky discovered that the IntelR 10GbE PCI Express ixgbe Ethernet driver for the Linux kernel performed insufficient control flow management. A local attacker could possibly use this to cause a denial of service. CVE-2021-33061 It was discovered that the framebuffer driver on the Linux...

GSD-2022-1005512 fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr

fs/ntfs3: Fix NULL deref in ntfsupdatemftmirr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.63 by commit...

PT-2022-33770 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.15 through v5.15.62 Description: A NULL dereference issue exists in the ntfs update mftmirr function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v5.1...

GSD-2022-1005134 fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr

fs/ntfs3: Fix NULL deref in ntfsupdatemftmirr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005133 fs/ntfs3: Fix missing i_op in ntfs_read_mft

fs/ntfs3: Fix missing iop in ntfsreadmft This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

USN-5616-1 linux-intel-iotg vulnerabilities

Asaf Modelevsky discovered that the IntelR 10GbE PCI Express ixgbe Ethernet driver for the Linux kernel performed insufficient control flow management. A local attacker could possibly use this to cause a denial of service. CVE-2021-33061 Moshe Kol, Amit Klein and Yossi Gilad discovered that the I...

USN-5616-1: Linux kernel (Intel IoTG) vulnerabilities

Asaf Modelevsky discovered that the IntelR 10GbE PCI Express ixgbe Ethernet driver for the Linux kernel performed insufficient control flow management. A local attacker could possibly use this to cause a denial of service. CVE-2021-33061 Moshe Kol, Amit Klein and Yossi Gilad discovered that the I...

PT-2022-33391 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.15 through v5.19.3 Description: A potential security issue has been identified in the Linux Kernel, related to the ntfs read mft function. The actual impact and attack plausibility have not yet been proven...

USN-5602-1 linux-raspi vulnerabilities

Asaf Modelevsky discovered that the IntelR 10GbE PCI Express ixgbe Ethernet driver for the Linux kernel performed insufficient control flow management. A local attacker could possibly use this to cause a denial of service. CVE-2021-33061 Moshe Kol, Amit Klein and Yossi Gilad discovered that the I...