PT-2022-36580 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.334 Description: The issue is related to an overflow when iterating ATTR RECORDs in ntfs. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the U.S. umount is a software package used to uninstall devices in Unix platforms. Linux kernel suffers from a security vulnerability that stems from a double-release flaw found in the NTFS3...

ALPINE-CVE-2022-30784

A crafted NTFS image can cause heap exhaustion in ntfsgetattributevalue in NTFS-3G through 2021.8.22...

UBUNTU-CVE-2022-30789

A crafted NTFS image can cause a heap-based buffer overflow in ntfschecklogclientarray in NTFS-3G through 2021.8.22...

Tuxera NTFS-3G 代码注入漏洞

Tuxera NTFS-3G is an open-source, cross-platform set of drivers from Tuxera Finland for supporting read and write NTFS partitions.A code injection vulnerability exists in Tuxera NTFS-3G, which stems from the presence of an invalid return code in fusekernmount. No detailed vulnerability details ar...

The vulnerability of the Windows Media Center component of the Windows operating system, which allows a hacker to gain elevated privileges

The vulnerability of the NTFS file system in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to increase their privileges...

A crafted NTFS image can cause a heap-based buffer overflow in ntfs_inode_lookup_by_name in NTFS-3G < 2021.8.22.

...

A crafted NTFS image can cause an out-of-bounds read in ntfs_ie_lookup in NTFS-3G < 2021.8.22.

...

ntfs-3g: Heap buffer overflow in ntfs_compressed_pwrite()

The ntfs3g package is susceptible to a heap overflow on crafted input. When processing an NTFS image, proper bounds checking was not enforced leading to this software flaw. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

AZL-6767 CVE-2021-39262 affecting package ntfs-3g for versions less than 2021.8.22-1

A crafted NTFS image can cause an out-of-bounds access in ntfsdecompress in NTFS-3G 2021.8.22...

UBUNTU-CVE-2021-39253

A crafted NTFS image can cause an out-of-bounds read in ntfsrunlistsmergei in NTFS-3G 2021.8.22...

AZL-6748 CVE-2021-33285 affecting package ntfs-3g for versions less than 2021.8.22-1

In NTFS-3G versions 2021.8.22, when a specially crafted NTFS attribute is supplied to the function ntfsgetattributevalue, a heap buffer overflow can occur allowing for memory disclosure or denial of service. The vulnerability is caused by an out-of-bound buffer access which can be triggered by...

CVE-2021-39261

A crafted NTFS image can cause a heap-based buffer overflow in ntfscompressedpwrite in NTFS-3G 2021.8.22...

The vulnerability of the NTFS file system in Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the DNS service in Microsoft Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CVE-2021-27096

NTFS Elevation of Privilege Vulnerability...

The vulnerability of the Mac OS X operating system, which allows a perpetrator to elevate privileges or cause service interruptions

The vulnerability of the ntfs component in the Mac OS X operating system arises due to buffer overflow. Exploiting this vulnerability can allow an attacker to increase privileges or cause service interruptions...

Apple MAC OS X NTFS Memory Layout Disclosure Vulnerability

Apple Mac OS X is a commercial operating system. A security vulnerability exists in Apple Mac OS X NTFS that allows local attackers to exploit the vulnerability to run malicious applications to obtain kernel memory layout...

PT-2002-2788 · Microsoft +1 · Ntfs +2

Name of the Vulnerable Software and Affected Versions: Eraser version 5.3 Description: The issue allows attackers to recover sensitive information that was supposed to be deleted because it does not clear Windows alternate data streams attached to files on NTFS file systems. Recommendations: For...