ntfs-3g: Out-of-bounds access in ntfs_decompress()

The ntfs3g package is susceptible to a heap overflow on crafted input. When processing an NTFS image, proper bounds checking was not enforced leading to this software flaw. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

ntfs-3g: NULL pointer dereference in ntfs_extent_inode_open()

The ntfs3g package is susceptible to an input validation attack. When processing a crafted NTFS image there is an improper check. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

CVE-2021-36955

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2021-36963

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2021-38633: Improper Privilege Management

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2021-36963: Improper Privilege Management

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2021-36955: Undefined Security Weakness

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

PT-2021-5229

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description The issue is related to errors in managing privileges in the Windows Common Log File System CLFS Driver. Exploitation of this issue may allow an attacker to elevate their privileges...

Microsoft Windows Redirected Drive Buffering 权限许可和访问控制问题漏洞

Microsoft Windows Redirected Drive Buffering is a Redirected Drive Buffering Subsystem RDBSS from Microsoft Corporation USA provided as the kernel-mode file system driver rdbss.sys, which is included in the operating system, and as the static library rdbsslib.lib provided as the kernel-mode file...

PT-2021-6335 · Microsoft · Windows Common Log File System Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Common Log File System Driver affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Common Log File System Driver, which can be exploited to elevate privileges. This allow...

DEBIAN-CVE-2021-35267

NTFS-3G versions 2021.8.22, a stack buffer overflow can occur when correcting differences in the MFT and MFTMirror allowing for code execution or escalation of privileges when setuid-root...

CVE-2021-39262

A crafted NTFS image can cause an out-of-bounds access in ntfsdecompress in NTFS-3G 2021.8.22...

Tuxera NTFS-3G 缓冲区错误漏洞

Tuxera NTFS-3G is Finland's Tuxera company's set of open source , cross-platform for supporting NTFS partition read and write drivers . NTFS-3G suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause a heap-based buffer overflow in ntfsinodelookupbyname in NTFS-...

Tuxera NTFS-3G 缓冲区错误漏洞

Tuxera NTFS-3G is an open source, cross-platform set of drivers from Tuxera Finland for reading and writing NTFS partitions.Tuxera NTFS-3G is vulnerable to a buffer overflow vulnerability that could be exploited by an attacker to crash an application or execute arbitrary code in the application...

Tuxera NTFS-3G 缓冲区错误漏洞

NTFS-3G is a stable, full-featured, read/write NTFS driver for Linux, Android, Mac OS X, FreeBSD, NetBSD, OpenSolaris, QNX, Haiku, and other operating systems. ntfsrunlistsmergei in versions prior to NTFS-3G 2021.8.22 is vulnerable to an out-of-bounds read. runlistsmergei is vulnerable to...

PT-2021-5752 · Ntfs-3G +7 · Ntfs-3G +7

Name of the Vulnerable Software and Affected Versions: NTFS-3G versions prior to 2021.8.22 Description: The issue is related to an out-of-bounds access in the ntfs inode sync standard information function of the NTFS-3G driver for the FUSE module. This can be triggered by a crafted NTFS image,...

PT-2021-5777 · Ntfs-3G +7 · Ntfs-3G +7

Name of the Vulnerable Software and Affected Versions: NTFS-3G versions prior to 2021.8.22 Description: The issue is related to a heap-based buffer overflow in the ntfs inode lookup by name function of the NTFS-3G driver. This can be triggered by a crafted NTFS image, potentially allowing an...

DEBIAN-CVE-2021-29157

Dovecot before 2.3.15 allows ../ Path Traversal. An attacker with access to the local filesystem can trick OAuth2 authentication into using an HS256 validation key from an attacker-controlled location. This occurs during use of local JWT validation with the posix fs driver...

CVE-2021-31954

CVE-2021-31954 is a Windows CLFS driver elevation-of-privilege vulnerability. The affected component is the Windows Common Log File System Driver, and the CVSS vectors indicate LOCAL attack vector with LOW attack complexity and privileges required (LOW), no user interaction, and total impact on c...

KLA12202 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, bypass security restrictions, cause denial of service. Below is a complete list of vulnerabilities: 1. An informati...