exfatprogs vulnerability

2024-08-2000:00:00

ubuntu.com

exfatprogs

vulnerability

ubuntu 22.04

memory operation

remote attacker

denial of service

arbitrary code

filesystems

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

AI Score

7.7

Confidence

Low

JSON

Releases

Ubuntu 22.04 LTS

Packages

exfatprogs - tools to create, check and label exFAT filesystems

Details

It was discovered that exfatprogs incorrectly handled certain memory
operations. If a user or automated system were tricked into handling
specially crafted exfat partitions, a remote attacker could use this issue
to cause exfatprogs to crash, resulting in a denial of service, or possibly
execute arbitrary code.

OSVersionArchitecturePackageVersionFilename
Ubuntu22.04noarchexfatprogs< 1.1.3-1ubuntu0.1UNKNOWN
Ubuntu22.04noarchexfatprogs-dbgsym< 1.1.3-1ubuntu0.1UNKNOWN