3633 matches found
Heap overflow
A crafted NTFS image can cause a heap-based buffer overflow in ntfsnamesfullcollate in NTFS-3G through 2021.8.22...
Code injection
An invalid return code in fusekernmount enables intercepting of libfuse-lite protocol traffic between NTFS-3G and the kernel in NTFS-3G through 2021.8.22 when using libfuse-lite...
Integer overflow
An integer underflow in fuselibreaddir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite...
Heap overflow
A crafted NTFS image can cause heap exhaustion in ntfsgetattributevalue in NTFS-3G through 2021.8.22...
CVE-2022-30784
A crafted NTFS image can cause heap exhaustion in ntfsgetattributevalue in NTFS-3G through 2021.8.22...
CVE-2022-30784
CVE-2022-30784 affects NTFS-3G up to and including 2021.8.22. A crafted NTFS image can cause a heap exhaustion in ntfs_get_attribute_value, with CVSSv3.1 vectors indicating LOCAL, LOW CWE, but HIGH confidentiality, integrity, and availability impact. The vulnerability is exposed via NTFS-3G’s FUS...
CVE-2022-30786
CVE-2022-30786 affects NTFS-3G via a heap-based buffer overflow in ntfs_names_full_collate (through 2021.8.22). Connected advisories confirm the issue across multiple vendors/distros and show patched versions or fixes (examples: Debian/DSA and AlmaLinux entries; Mariner advisory notes upgrade to ...
CVE-2022-30789
A crafted NTFS image can cause a heap-based buffer overflow in ntfschecklogclientarray in NTFS-3G through 2021.8.22...
CVE-2022-30787
CVE-2022-30787 affects NTFS-3G when using libfuse-lite, caused by an integer underflow in fuse_lib_readdir that enables arbitrary memory reads. The issue is tied to NTFS-3G up through 2021.8.22. Multiple advisories (Debian DLA/DSA, Alpine, CNVD, etc.) document this CVE and list fixes in newer NTF...
CVE-2022-30783
An invalid return code in fusekernmount enables intercepting of libfuse-lite protocol traffic between NTFS-3G and the kernel in NTFS-3G through 2021.8.22 when using libfuse-lite...
CVE-2022-30783
An invalid return code in fusekernmount enables intercepting of libfuse-lite protocol traffic between NTFS-3G and the kernel in NTFS-3G through 2021.8.22 when using libfuse-lite...
Tuxera NTFS-3G 缓冲区错误漏洞
Tuxera NTFS-3G is an open source, cross-platform set of drivers from Tuxera Finland for supporting read and write NTFS partitions.A buffer overflow vulnerability exists in Tuxera NTFS-3G, which stems from a boundary error in ntfschecklogclientarray when handling untrusted input, and could be...
CVE-2022-30789
NTFS-3G contains a heap-based buffer overflow in ntfs_check_log_client_array (through 2021.8.22). Affected: NTFS-3G implementations shipping NTFS support; root cause is a boundary/overflow issue when handling NTFS image data. Impact is reported as high (confidentiality, integrity, and availabilit...
CVE-2022-30785
A file handle created in fuselibopendir, and later used in fuselibreaddir, enables arbitrary memory read and write operations in NTFS-3G through 2021.8.22 when using libfuse-lite...
CVE-2022-30787
An integer underflow in fuselibreaddir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite...
CVE-2022-30783
An invalid return code in fusekernmount enables intercepting of libfuse-lite protocol traffic between NTFS-3G and the kernel in NTFS-3G through 2021.8.22 when using libfuse-lite...
CVE-2022-30787
An integer underflow in fuselibreaddir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite...
CVE-2022-30787
An integer underflow in fuselibreaddir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite...