CVE-2021-35268

The CVE-2021-35268 issue affects NTFS-3G. A heap buffer overflow occurs in ntfs_inode_real_open when a specially crafted NTFS inode is loaded, enabling potential code execution and privilege escalation. This vulnerability affects NTFS-3G versions older than 2021.8.22. Public advisories and vendor...

CVE-2021-35266

NTFS-3G vulnerability CVE-2021-35266 affects versions

CVE-2021-39257

CVE-2021-39257 affects NTFS-3G, where a crafted NTFS image with an unallocated bitmap can trigger an endless recursive call chain starting at ntfs_attr_pwrite, causing stack consumption. Documented impact is a stack exhaustion condition in NTFS-3G

CVE-2021-35266

In NTFS-3G versions 2021.8.22, when a specially crafted NTFS inode pathname is supplied in an NTFS image a heap buffer overflow can occur resulting in memory disclosure, denial of service and even code execution...

CVE-2021-39257

A crafted NTFS image with an unallocated bitmap can lead to a endless recursive function call chain starting from ntfsattrpwrite, causing stack consumption in NTFS-3G 2021.8.22...

CVE-2021-39261

A crafted NTFS image can cause a heap-based buffer overflow in ntfscompressedpwrite in NTFS-3G 2021.8.22...

CVE-2021-33289

NTFS-3G prior to version 2021.8.22 is vulnerable to a heap buffer overflow when processing a specially crafted MFT section in an NTFS image, allowing potential code execution. Connected advisories from Astra Linux, Debian (DSA-4971-1, DLA-2819-1), Alpine (CVE-2021-33289) and others confirm the is...

CVE-2021-33286

NTFS-3G (Tuxera NTFS-3G) is affected for versions older than 2021.8.22. A heap-based overflow is triggered by a specially crafted Unicode string in an NTFS image, which can lead to code execution. The issue is explicitly associated with CVE-2021-33286 and is corroborated across multiple advisorie...

CVE-2021-39259

CVE-2021-39259 affects NTFS-3G: a crafted NTFS image can trigger an out-of-bounds access due to an unsanitized attribute length in ntfs_inode_lookup_by_name (NTFS-3G

CVE-2021-39260

CVE-2021-39260 affects NTFS-3G with an out-of-bounds access in ntfs_inode_sync_standard_information when processing a crafted NTFS image. The description indicates NTFS-3G versions prior to 2021.8.22 are vulnerable. Connected advisories reference remediation by upgrading to 2021.8.22 or newer (e....

Tuxera NTFS-3G Buffer Overflow Vulnerability (CNVD-2021-72266)

Tuxera NTFS-3G is Finland's Tuxera company's set of open source , cross-platform for supporting NTFS partition read and write drivers . A security vulnerability exists in NTFS-3G that originates from an application's improper validation of certain NTFS metadata, which can be exploited by an...

Security update for ntfs-3g_ntfsprogs (important)

openSUSE Security Update: Security update for ntfs-3gntfsprogs Announcement ID: openSUSE-SU-2021:2971-1 Rating: important References: 1189720 Cross-References: CVE-2019-9755 CVE-2021-33285 CVE-2021-33286 CVE-2021-33287 CVE-2021-33289 CVE-2021-35266 CVE-2021-35267 CVE-2021-35268 CVE-2021-35269...

CVE-2021-39261

The ntfs3g package is susceptible to a heap overflow on crafted input. When processing an NTFS image, proper bounds checking was not enforced leading to this software flaw. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

CVE-2021-39258

The ntfs3g package is susceptible to a heap overflow on crafted input. When processing an NTFS image, proper bounds checking was not enforced leading to this software flaw. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

CVE-2021-39263

The ntfs3g package is susceptible to a heap overflow on crafted input. When processing an NTFS image, proper bounds checking was not enforced leading to this software flaw. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

CVE-2021-39259

The ntfs3g package is susceptible to a heap overflow on crafted input. When processing an NTFS image, proper bounds checking was not enforced leading to this software flaw. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

CVE-2021-39260

The ntfs3g package is susceptible to a heap overflow on crafted input. When processing an NTFS image, proper bounds checking was not enforced leading to this software flaw. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

CVE-2021-39256

The ntfs3g package is susceptible to a heap overflow on crafted input. When processing an NTFS image, proper bounds checking was not enforced leading to this software flaw. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

CVE-2021-39251

The ntfs3g package is susceptible to an input validation attack. When processing a crafted NTFS image there is an improper check. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

CVE-2021-39253

The ntfs3g package is susceptible to an input validation flaw. When processing a crafted NTFS image there is an improper check which leads to an out of bounds read. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...