3624 matches found
CVE-2021-39259
A crafted NTFS image can trigger an out-of-bounds access, caused by an unsanitized attribute length in ntfsinodelookupbyname, in NTFS-3G 2021.8.22...
CVE-2021-39253
A crafted NTFS image can cause an out-of-bounds read in ntfsrunlistsmergei in NTFS-3G 2021.8.22...
CVE-2021-39262
A crafted NTFS image can cause an out-of-bounds access in ntfsdecompress in NTFS-3G 2021.8.22...
CVE-2021-39253
CVE-2021-39253 affects NTFS-3G prior to version 2021.8.22. A crafted NTFS image can trigger an out-of-bounds read in the function ntfs_runlists_merge_i, potentially leading to memory access errors. Several trusted sources summarize the issue across distributions and advisories, all tying the vuln...
CVE-2021-33285
NTFS-3G vulnerability (CVE-2021-33285) affects versions before 2021.8.22. A crafted NTFS attribute input to ntfs_get_attribute_value can trigger an out-of-bounds heap access due to a missing consistency check after reading an MFT record; if bytes_in_use is not less than bytes_allocated, parsing c...
CVE-2021-39254
A crafted NTFS image can cause an integer overflow in memmove, leading to a heap-based buffer overflow in the function ntfsattrrecordresize, in NTFS-3G 2021.8.22...
Tuxera NTFS-3G Buffer Overflow Vulnerability (CNVD-2021-72270)
Tuxera NTFS-3G is Finland's Tuxera company's set of open source , cross-platform for supporting NTFS partition read and write drivers . NTFS-3G suffers from a buffer overflow vulnerability that can be exploited by an attacker to potentially cause out-of-bounds reads in ntfsattrfind and...
CVE-2021-39258
A crafted NTFS image can cause out-of-bounds reads in ntfsattrfind and ntfsexternalattrfind in NTFS-3G 2021.8.22...
CVE-2021-39255
A crafted NTFS image can trigger an out-of-bounds read, caused by an invalid attribute in ntfsattrfindinattrdef, in NTFS-3G 2021.8.22...
CVE-2021-35267
NTFS-3G is affected by CVE-2021-35267 for versions older than 2021.8.22. The issue is a stack/heap buffer overflow in MFT/MFTMirror handling that can enable code execution or privilege escalation when setuid-root. Connected advisories from Astra Linux and Alpine Linux confirm the
CVE-2021-39258
CVE-2021-39258 affects NTFS-3G prior to 2021.8.22, causing out-of-bounds reads in ntfs_attr_find and ntfs_external_attr_find when processing a crafted NTFS image. Public references list the issue in NTFS-3G and note that upgrading to version 2021.8.22 or later resolves the vulnerability. Connecte...
CVE-2021-33287
In NTFS-3G versions 2021.8.22, when specially crafted NTFS attributes are read in the function ntfsattrpreadi, a heap buffer overflow can occur and allow for writing to arbitrary memory or denial of service of the application...
CVE-2021-35268
In NTFS-3G versions 2021.8.22, when a specially crafted NTFS inode is loaded in the function ntfsinoderealopen, a heap buffer overflow can occur allowing for code execution and escalation of privileges...
CVE-2021-35269
NTFS-3G versions 2021.8.22, when a specially crafted NTFS attribute from the MFT is setup in the function ntfsattrsetupflag, a heap buffer overflow can occur allowing for code execution and escalation of privileges...
CVE-2021-39256
A crafted NTFS image can cause a heap-based buffer overflow in ntfsinodelookupbyname in NTFS-3G 2021.8.22...
CVE-2021-39260
A crafted NTFS image can cause an out-of-bounds access in ntfsinodesyncstandardinformation in NTFS-3G 2021.8.22...
CVE-2021-39259
A crafted NTFS image can trigger an out-of-bounds access, caused by an unsanitized attribute length in ntfsinodelookupbyname, in NTFS-3G 2021.8.22...
CVE-2021-33286
In NTFS-3G versions 2021.8.22, when a specially crafted unicode string is supplied in an NTFS image a heap buffer overflow can occur and allow for code execution...