3624 matches found
Tuxera NTFS-3G Buffer Overflow Vulnerability (CNVD-2021-72271)
Tuxera NTFS-3G is Finland's Tuxera company's set of open source , cross-platform for supporting NTFS partition read and write drivers . NTFS-3G suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause a possible heap buffer overflow, which could result in a memor...
CVE-2021-33285
In NTFS-3G versions 2021.8.22, when a specially crafted NTFS attribute is supplied to the function ntfsgetattributevalue, a heap buffer overflow can occur allowing for memory disclosure or denial of service. The vulnerability is caused by an out-of-bound buffer access which can be triggered by...
CVE-2021-39255
NTFS-3G vulnerable: crafted NTFS images can trigger an out-of-bounds read due to an invalid attribute in ntfs_attr_find_in_attrdef in NTFS-3G versions prior to 2021.8.22. Affected product: ntfs-3g. Impact: information disclosure/possible crash from out-of-bounds read (local impact per CVE). Remed...
CVE-2021-39257
A crafted NTFS image with an unallocated bitmap can lead to a endless recursive function call chain starting from ntfsattrpwrite, causing stack consumption in NTFS-3G 2021.8.22...
Tuxera NTFS-3G Buffer Overflow Vulnerability (CNVD-2021-72268)
Tuxera NTFS-3G is Finland's Tuxera company's set of open source , cross-platform for supporting NTFS partition read and write drivers . A security vulnerability exists in NTFS-3G that originates from an application's improper validation of certain NTFS metadata, which can be exploited by an...
Aruba Networks ArubaOS Operating System Command Injection Vulnerability (CNVD-2021-71261)
Aruba Networks ArubaOS is an operating system for Aruba Mobility-Defined Networks including mobile controllers and mobile access switches from Aruba Networks, Inc. injection vulnerability, which is caused by incorrect validation of certain NTFS metadata by the application, which could lead to a...
Tuxera NTFS-3G Buffer Overflow Vulnerability (CNVD-2021-72267)
Tuxera NTFS-3G is Finland's Tuxera company's set of open source , cross-platform for supporting NTFS partition read and write drivers . A security vulnerability exists in NTFS-3G that originates from an application's improper validation of certain NTFS metadata, which can be exploited by an...
Tuxera NTFS-3G Buffer Overflow Vulnerability (CNVD-2021-72269)
Tuxera NTFS-3G is a set of open source, cross-platform drivers from Tuxera Finland that support reading and writing to NTFS partitions. NTFS-3G is vulnerable to a buffer overflow vulnerability that could be exploited to cause a heap buffer overflow and allow code execution...
CVE-2021-39256
A crafted NTFS image can cause a heap-based buffer overflow in ntfsinodelookupbyname in NTFS-3G 2021.8.22...
CVE-2021-39263
A crafted NTFS image can trigger a heap-based buffer overflow, caused by an unsanitized attribute in ntfsgetattributevalue, in NTFS-3G 2021.8.22...
CVE-2021-39252
A crafted NTFS image can cause an out-of-bounds read in ntfsielookup in NTFS-3G 2021.8.22...
CVE-2021-39255
A crafted NTFS image can trigger an out-of-bounds read, caused by an invalid attribute in ntfsattrfindinattrdef, in NTFS-3G 2021.8.22...
CVE-2021-39256
CVE-2021-39256 describes a heap-based buffer overflow in ntfs_inode_lookup_by_name within NTFS-3G. The issue affects NTFS-3G prior to version 2021.8.22 when processing a crafted NTFS image, potentially enabling exploitation via local interaction. Connected advisories confirm this vulnerability in...
CVE-2021-39262
CVE-2021-39262 affects NTFS-3G prior to 2021.8.22, enabling a crafted NTFS image to trigger an out-of-bounds access in the ntfs_decompress function. Public advisories across multiple distributions (Debian, Alpine, AlmaLinux, etc.) indicate a fix in or after version 2021.8.22. Affected packages in...
CVE-2021-35269
NTFS-3G vulnerability CVE-2021-35269 affects ntfs-3g of versions prior to 2021.8.22. A specially crafted NTFS attribute from the MFT may trigger a heap buffer overflow in ntfs_attr_setup_flag, allowing code execution and privilege escalation. Public advisories (Alpine Linux and Debian/Marian refe...
CVE-2021-39253
A crafted NTFS image can cause an out-of-bounds read in ntfsrunlistsmergei in NTFS-3G 2021.8.22...
CVE-2021-35269
NTFS-3G versions 2021.8.22, when a specially crafted NTFS attribute from the MFT is setup in the function ntfsattrsetupflag, a heap buffer overflow can occur allowing for code execution and escalation of privileges...
CVE-2021-35268
In NTFS-3G versions 2021.8.22, when a specially crafted NTFS inode is loaded in the function ntfsinoderealopen, a heap buffer overflow can occur allowing for code execution and escalation of privileges...
CVE-2021-39253
CVE-2021-39253 affects NTFS-3G prior to version 2021.8.22. A crafted NTFS image can trigger an out-of-bounds read in the function ntfs_runlists_merge_i, potentially leading to memory access errors. Several trusted sources summarize the issue across distributions and advisories, all tying the vuln...