3624 matches found
CVE-2021-35267
NTFS-3G versions 2021.8.22, a stack buffer overflow can occur when correcting differences in the MFT and MFTMirror allowing for code execution or escalation of privileges when setuid-root...
CVE-2021-33287
In NTFS-3G versions 2021.8.22, when specially crafted NTFS attributes are read in the function ntfsattrpreadi, a heap buffer overflow can occur and allow for writing to arbitrary memory or denial of service of the application...
CVE-2021-39251
CVE-2021-39251 affects NTFS-3G: a crafted NTFS image can trigger a NULL pointer dereference in ntfs_extent_inode_open. Affected versions are NTFS-3G before 2021.8.22. Reports across multiple distributions confirm the issue and indicate fixes in 2021.8.22+. Impact is NULL pointer dereference (poss...
CVE-2021-39263
A crafted NTFS image can trigger a heap-based buffer overflow, caused by an unsanitized attribute in ntfsgetattributevalue, in NTFS-3G 2021.8.22...
CVE-2021-35266
In NTFS-3G versions 2021.8.22, when a specially crafted NTFS inode pathname is supplied in an NTFS image a heap buffer overflow can occur resulting in memory disclosure, denial of service and even code execution...
CVE-2021-39261
A crafted NTFS image can cause a heap-based buffer overflow in ntfscompressedpwrite in NTFS-3G 2021.8.22...
CVE-2021-39261
A crafted NTFS image can cause a heap-based buffer overflow in ntfscompressedpwrite in NTFS-3G 2021.8.22...
CVE-2021-39251
A crafted NTFS image can cause a NULL pointer dereference in ntfsextentinodeopen in NTFS-3G 2021.8.22...
CVE-2021-39261
CVE-2021-39261 affects NTFS-3G prior to 2021.8.22, with a heap-based buffer overflow in ntfs_compressed_pwrite. Technical details in connected docs confirm the vulnerable component and issue; mitigations are release updates to 2021.8.22 and later (e.g., Debian/Alt Linux advisories). No exploit de...
Tuxera NTFS-3G Buffer Overflow Vulnerability (CNVD-2021-72271)
Tuxera NTFS-3G is Finland's Tuxera company's set of open source , cross-platform for supporting NTFS partition read and write drivers . NTFS-3G suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause a possible heap buffer overflow, which could result in a memor...
Aruba Networks ArubaOS Command Injection Vulnerability (CNVD-2021-71260)
Aruba Networks ArubaOS, an operating system for Aruba Mobility-Defined Networks including mobile controllers and mobile access switches from Aruba Networks, is vulnerable to a command injection vulnerability. The vulnerability is caused by incorrect validation of certain NTFS metadata by the...
CVE-2021-39256
A crafted NTFS image can cause a heap-based buffer overflow in ntfsinodelookupbyname in NTFS-3G 2021.8.22...
CVE-2021-33286
In NTFS-3G versions 2021.8.22, when a specially crafted unicode string is supplied in an NTFS image a heap buffer overflow can occur and allow for code execution...
CVE-2021-33287
NTFS-3G contains a heap buffer overflow in ntfs_attr_pread_i when reading specially crafted NTFS attributes, affecting versions
Tuxera NTFS-3G Buffer Overflow Vulnerability (CNVD-2021-72276)
Tuxera NTFS-3G is Finland's Tuxera company's set of open source , cross-platform for supporting NTFS partition read and write drivers . NTFS-3G suffers from a buffer overflow vulnerability that can be exploited by an attacker to potentially cause out-of-bounds access in...
CVE-2021-33285
In NTFS-3G versions 2021.8.22, when a specially crafted NTFS attribute is supplied to the function ntfsgetattributevalue, a heap buffer overflow can occur allowing for memory disclosure or denial of service. The vulnerability is caused by an out-of-bound buffer access which can be triggered by...
CVE-2021-39251
A crafted NTFS image can cause a NULL pointer dereference in ntfsextentinodeopen in NTFS-3G 2021.8.22...
CVE-2021-33289
In NTFS-3G versions 2021.8.22, when a specially crafted MFT section is supplied in an NTFS image a heap buffer overflow can occur and allow for code execution...