Ubuntu 16.04 ESM : NTFS-3G vulnerabilities (USN-5463-2)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5463-2 advisory. USN-5463-1 fixed vulnerabilities in NTFS-3G. This update provides the corresponding updates for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Tenable has...

USN-5463-2: NTFS-3G vulnerabilities

USN-5463-1 fixed vulnerabilities in NTFS-3G. This update provides the corresponding updates for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Roman Fiedler discovered that NTFS-3G incorrectly handled certain return codes. A local attacker could possibly use this issue to...

USN-5463-2 ntfs-3g vulnerabilities

USN-5463-1 fixed vulnerabilities in NTFS-3G. This update provides the corresponding updates for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Roman Fiedler discovered that NTFS-3G incorrectly handled certain return codes. A local attacker could possibly use this issue to...

USN-5529-1: Linux kernel (OEM) vulnerabilities

It was discovered that the Atheros ath9k wireless device driver in the Linux kernel did not properly handle some error conditions, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-1679...

USN-5529-1 linux-oem-5.17 vulnerabilities

It was discovered that the Atheros ath9k wireless device driver in the Linux kernel did not properly handle some error conditions, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-1679...

The vulnerability of NTFS file system descriptors for the FUSE NTFS-3G module allows a attacker to execute arbitrary code with elevated privileges.

The vulnerability of NTFS file system descriptors for the FUSE NTFS-3G module relates to reading and writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges using a specially crafted request...

The vulnerability of the `fuse_kern_mount` function in the `libfuse-lite` library, implemented in the NTFS file system, allows a malicious actor to execute arbitrary code with elevated privileges.

The vulnerability of the fusekernmount function in the libfuse-lite library, implemented in the NTFS file system, affects the FUSE module NTFS-3G. This vulnerability involves returning an incorrect process status code. Exploiting this vulnerability could allow an attacker to execute arbitrary cod...

The vulnerability of the check_file_record function in the NTFS file system, which allows a malicious actor to execute arbitrary code with elevated privileges through the FUSE NTFS-3G module.

The vulnerability of the checkfilerecord function in the NTFS file system relates to buffer overflow in dynamic memory. Exploitation of this vulnerability allows a remote attacker to execute arbitrary code with elevated privileges using a specially crafted NTFS file system...

The vulnerability of the `fuse_lib_readdir` function in the `libfuse-lite` library of the NTFS file system, which allows a attacker to execute arbitrary code with elevated privileges on the FUSE NTFS-3G module.

The vulnerability of the fuselibreaddir function in the libfuse-lite library of the NTFS file system for the FUSE NTFS-3G module is related to a numerical value loss of significance. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges using a...

GSD-2022-1002861 fs/ntfs3: provide block_invalidate_folio to fix memory leak

fs/ntfs3: provide blockinvalidatefolio to fix memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

CVE-2022-30786 affecting package ntfs-3g for versions less than 2022.5.17-1

CVE-2022-30786 affecting package ntfs-3g for versions less than 2022.5.17-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-30789 affecting package ntfs-3g for versions less than 2022.5.17-1

CVE-2022-30789 affecting package ntfs-3g for versions less than 2022.5.17-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-30787 affecting package ntfs-3g for versions less than 2022.5.17-1

CVE-2022-30787 affecting package ntfs-3g for versions less than 2022.5.17-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-30783 affecting package ntfs-3g for versions less than 2022.5.17-1

CVE-2022-30783 affecting package ntfs-3g for versions less than 2022.5.17-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-30785 affecting package ntfs-3g for versions less than 2022.5.17-1

CVE-2022-30785 affecting package ntfs-3g for versions less than 2022.5.17-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-46790 affecting package ntfs-3g for versions less than 2022.5.17-1

CVE-2021-46790 affecting package ntfs-3g for versions less than 2022.5.17-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-30788 affecting package ntfs-3g for versions less than 2022.5.17-1

CVE-2022-30788 affecting package ntfs-3g for versions less than 2022.5.17-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-30784 affecting package ntfs-3g for versions less than 2022.5.17-1

CVE-2022-30784 affecting package ntfs-3g for versions less than 2022.5.17-1. An upgraded version of the package is available that resolves this issue...

Fedora: Security Advisory for ntfs-3g (FEDORA-2022-8fa7e5aeaf)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for ntfs-3g-system-compression (FEDORA-2022-1176b501f0)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...