ubuntu

NTFS-3G vulnerabilities

USN-5463-1 fixed vulnerabilities in NTFS-3G. This update provides the corresponding updates for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Roman Fiedler discovered that NTFS-3G incorrectly handled certain return codes. A local attacker could possibly use this issue to...

7.2 CVSS

2022-08-02T00:00:00

fedora

[SECURITY] Fedora 35 Update: ntfs-3g-system-compression-1.0-9.fc35

System compression, also known as "Compact OS", is a Windows feature that allows rarely modified files to be compressed using the XPRESS or LZX compression formats. It is not built directly into NTFS but rather is implemented using reparse points. This feature appeared in Windows 10 and it appears...

7.5 CVSS

2022-06-24T01:26:22

fedora

[SECURITY] Fedora 35 Update: ntfs-3g-2022.5.17-1.fc35

NTFS-3G is a stable, open source, GPL licensed, POSIX, read/write NTFS driver for Linux and many other operating systems. It provides safe handling of the Windows XP, Windows Server 2003, Windows 2000, Windows Vista, Windows Server 2008 and Windows 7 NTFS file systems. NTFS-3G can create, remove,...

7.5 CVSS

2022-06-24T01:26:20

debian

[SECURITY] [DLA 3055-1] ntfs-3g security update

Debian LTS Advisory DLA-3055-1 debian-lts@lists.debian.org https://www.debian.org/lts/security/ Sylvain Beucler June 21, 2022 https://wiki.debian.org/LTS Package : ntfs-3g Version : 1:2016.2.22AR.1+dfsg-1+deb9u3 CVE...

7.2 CVSS

2022-06-21T14:56:28

fedora

[SECURITY] Fedora 36 Update: ntfs-3g-system-compression-1.0-9.fc36

System compression, also known as "Compact OS", is a Windows feature that allows rarely modified files to be compressed using the XPRESS or LZX compression formats. It is not built directly into NTFS but rather is implemented using reparse points. This feature appeared in Windows 10 and it appears...

7.5 CVSS

2022-06-18T00:38:19

fedora

[SECURITY] Fedora 36 Update: ntfs-3g-2022.5.17-1.fc36

NTFS-3G is a stable, open source, GPL licensed, POSIX, read/write NTFS driver for Linux and many other operating systems. It provides safe handling of the Windows XP, Windows Server 2003, Windows 2000, Windows Vista, Windows Server 2008 and Windows 7 NTFS file systems. NTFS-3G can create, remove,...

7.5 CVSS

2022-06-17T01:15:04

debian

[SECURITY] [DSA 5160-1] ntfs-3g security update

Debian Security Advisory DSA-5160-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso June 10, 2022 https://www.debian.org/security/faq Package : ntfs-3g CVE ID : CVE-2021-46790 CVE-2022-30783...

7.5 CVSS

2022-06-10T21:19:00

ubuntu

NTFS-3G vulnerabilities

It was discovered that NTFS-3G incorrectly handled the ntfsck tool. If a user or automated system were tricked into using ntfsck on a specially crafted disk image, a remote attacker could possibly use this issue to execute arbitrary code. (CVE-2021-46790) Roman Fiedler discovered that NTFS-3G...

7.5 CVSS

2022-06-07T00:00:00

ubuntu

NTFS-3G vulnerability

It was discovered that NTFS-3G was incorrectly validating NTFS metadata in its ntfsck tool by not performing boundary checks. A local attacker could possibly use this issue to cause a denial of service or to execute arbitrary...

7.5 CVSS

2022-05-30T00:00:00

debiancve

CVE-2022-30785

A file handle created in fuse_lib_opendir, and later used in fuse_lib_readdir, enables arbitrary memory read and write operations in NTFS-3G through 2021.8.22 when using...

7.2 CVSS

2022-05-26T16:15:00

debiancve

CVE-2022-30789

A crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array in NTFS-3G through...

4.6 CVSS

2022-05-26T16:15:00

debiancve

CVE-2022-30783

An invalid return code in fuse_kern_mount enables intercepting of libfuse-lite protocol traffic between NTFS-3G and the kernel in NTFS-3G through 2021.8.22 when using...

4.6 CVSS

2022-05-26T16:15:00

debiancve

CVE-2022-30786

A crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate in NTFS-3G through...

4.6 CVSS

2022-05-26T16:15:00

debiancve

CVE-2022-30784

A crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value in NTFS-3G through...

4.6 CVSS

2022-05-26T16:15:00

debiancve

CVE-2022-30788

A crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc in NTFS-3G through...

4.6 CVSS

2022-05-26T16:15:00

debiancve

CVE-2022-30787

An integer underflow in fuse_lib_readdir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using...

4.6 CVSS

2022-05-26T16:15:00

ubuntucve

CVE-2022-30784

A crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value in NTFS-3G through 2021.8.22. Bugs ...

4.6 CVSS

2022-05-26T00:00:00

ubuntucve

CVE-2022-30788

A crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc in NTFS-3G through 2021.8.22. Bugs ...

4.6 CVSS

2022-05-26T00:00:00

ubuntucve

CVE-2022-30787

An integer underflow in fuse_lib_readdir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite. Bugs http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1011770 Notes Author| Note ---|--- mdeslaur | probably same commit as...

4.6 CVSS

2022-05-26T00:00:00

ubuntucve

CVE-2022-30786

A crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate in NTFS-3G through 2021.8.22. Bugs ...

4.6 CVSS

2022-05-26T00:00:00

affectedPackage.packageName:"ntfs-3g"

NTFS-3G vulnerabilities

[SECURITY] Fedora 35 Update: ntfs-3g-system-compression-1.0-9.fc35

[SECURITY] Fedora 35 Update: ntfs-3g-2022.5.17-1.fc35

[SECURITY] [DLA 3055-1] ntfs-3g security update

[SECURITY] Fedora 36 Update: ntfs-3g-system-compression-1.0-9.fc36

[SECURITY] Fedora 36 Update: ntfs-3g-2022.5.17-1.fc36

[SECURITY] [DSA 5160-1] ntfs-3g security update

NTFS-3G vulnerabilities

NTFS-3G vulnerability

CVE-2022-30785

CVE-2022-30789

CVE-2022-30783

CVE-2022-30786

CVE-2022-30784

CVE-2022-30788

CVE-2022-30787

CVE-2022-30784

CVE-2022-30788

CVE-2022-30787

CVE-2022-30786