GSD-2023-1000933 fs/ntfs3: Fix slab-out-of-bounds read in run_unpack

fs/ntfs3: Fix slab-out-of-bounds read in rununpack This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000931 fs/ntfs3: Validate index root when initialize NTFS security

fs/ntfs3: Validate index root when initialize NTFS security This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000929 fs/ntfs3: Use __GFP_NOWARN allocation at ntfs_fill_super()

fs/ntfs3: Use GFPNOWARN allocation at ntfsfillsuper This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000927 fs/ntfs3: Delete duplicate condition in ntfs_read_mft()

fs/ntfs3: Delete duplicate condition in ntfsreadmft This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000493 fs/ntfs3: Validate data run offset

fs/ntfs3: Validate data run offset This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit e0455361d3068066a91fe18282b751925d7b5ee7. F...

GSD-2023-1000474 fs/ntfs3: Validate index root when initialize NTFS security

fs/ntfs3: Validate index root when initialize NTFS security This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

GSD-2023-1000471 fs/ntfs3: Use __GFP_NOWARN allocation at ntfs_fill_super()

fs/ntfs3: Use GFPNOWARN allocation at ntfsfillsuper This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

GSD-2023-1000469 fs/ntfs3: Delete duplicate condition in ntfs_read_mft()

fs/ntfs3: Delete duplicate condition in ntfsreadmft This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

PT-2023-33544 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.17 Description: A slab-out-of-bounds issue was discovered in the fs/ntfs3 component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2023-33548 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.17 Description: The issue is related to the ntfs fill super function in the fs/ntfs3 module, where a GFP NOWARN allocation is used. The actual impact and attack plausibility have not yet been proven...

PT-2023-34020 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.87 Description: A memory leak issue exists in the ntfs fill super error path. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v5.15.8...

PT-2023-34132 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: A slab-out-of-bounds read issue was discovered in the ntfs trim fs function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2023-34015 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.87 Description: The issue is related to the validation of buffer length while parsing an index in the fs/ntfs3 component. The actual impact and attack plausibility have not yet been proven. Recommendations...

PowerHuntShares - Audit Script Designed In Inventory, Analyze, And Report Excessive Privileges Configured On Active Directory Domains

PowerHuntShares is design to automatically inventory, analyze, and report excessive privilege assigned to SMB shares on Active Directory domain joined computers. It is intented to help IAM and other blue teams gain a better understand of their SMB Share attack surface and provides data insights t...

GLSA-202301-01 : NTFS-3G: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202301-01 NTFS-3G: Multiple Vulnerabilities - In NTFS-3G versions 2021.8.22, when a specially crafted NTFS attribute is supplied to the function ntfsgetattributevalue, a heap buffer overflow can occur allowing for memory disclosur...

NTFS-3G: Multiple Vulnerabilities

Background NTFS-3G is a stable, full-featured, read-write NTFS driver for various operating systems. Description Multiple vulnerabilities have been discovered in NTFS-3G. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for detail...

PT-2025-54101

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential null-pointer dereference issue exists in the ni clear function within the fs/ntfs3 component. A previous commit addressed a similar issue in ni write inode, but the fix was n...

PT-2025-37558

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.0.0-rc7 Description: A use-after-free vulnerability exists in the Linux kernel's NTFS3 filesystem, specifically within the indx get root function. The vulnerability is due to a missing length check, potentiall...

CVE-2019-9579

An issue was discovered in Illumos in Nexenta NexentaStor 4.0.5 and 5.1.2, and other products. The SMB server allows an attacker to have unintended access, e.g., an attacker with WRITEXATTR can change permissions. This occurs because of a combination of three factors: ZFS extended attributes are...

[SECURITY] Fedora 37 Update: ntfs-3g-2022.10.3-1.fc37

NTFS-3G is a stable, open source, GPL licensed, POSIX, read/write NTFS driver for Linux and many other operating systems. It provides safe handling of the Windows XP, Windows Server 2003, Windows 2000, Windows Vista, Windows Server 2008 and Windows 7 NTFS file systems. NTFS-3G can create, remove,...