CVE-2023-52890

2024-06-1300:00:00

ubuntu.com

cve-2023-52890

ntfs-3g

use-after-free

ntfs_uppercase_mbs

libntfs-3g

exploitation

challenging

unix

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

NTFS-3G before 75dcdc2 has a use-after-free in ntfs_uppercase_mbs in
libntfs-3g/unistr.c. NOTE: discussion suggests that exploitation would be
challenging.

Bugs

Notes

Author	Note
	Priority reason: Exploitation of this vulnerability likely difficult
mdeslaur	Exploitation of this vulnerability likely difficult, see upstream bug discussion. As such, marking as low priority.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchntfs-3g< anyUNKNOWN
ubuntu20.04noarchntfs-3g< anyUNKNOWN
ubuntu22.04noarchntfs-3g< anyUNKNOWN
ubuntu23.10noarchntfs-3g< anyUNKNOWN
ubuntu24.04noarchntfs-3g< anyUNKNOWN
ubuntu14.04noarchntfs-3g< anyUNKNOWN
ubuntu16.04noarchntfs-3g< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	ntfs-3g	< any	UNKNOWN
ubuntu	20.04	noarch	ntfs-3g	< any	UNKNOWN
ubuntu	22.04	noarch	ntfs-3g	< any	UNKNOWN
ubuntu	23.10	noarch	ntfs-3g	< any	UNKNOWN
ubuntu	24.04	noarch	ntfs-3g	< any	UNKNOWN
ubuntu	14.04	noarch	ntfs-3g	< any	UNKNOWN
ubuntu	16.04	noarch	ntfs-3g	< any	UNKNOWN