Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Ntfs\-3g
(Tuxera)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 32 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2021-09-07 | CVE-2021-39263 | A crafted NTFS image can trigger a heap-based buffer overflow, caused by an unsanitized attribute in ntfs_get_attribute_value, in NTFS-3G < 2021.8.22. | Debian_linux, Ntfs\-3g | 7.8 | ||
| 2022-05-02 | CVE-2021-46790 | ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+512*3-2. NOTE: the upstream position is that ntfsck is deprecated; however, it is shipped by some Linux distributions. | Debian_linux, Fedora, Ntfs\-3g | 7.8 | ||
| 2022-05-26 | CVE-2022-30783 | An invalid return code in fuse_kern_mount enables intercepting of libfuse-lite protocol traffic between NTFS-3G and the kernel in NTFS-3G through 2021.8.22 when using libfuse-lite. | Debian_linux, Fedora, Ntfs\-3g | 6.7 | ||
| 2022-05-26 | CVE-2022-30784 | A crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value in NTFS-3G through 2021.8.22. | Debian_linux, Fedora, Ntfs\-3g | 7.8 | ||
| 2022-05-26 | CVE-2022-30785 | A file handle created in fuse_lib_opendir, and later used in fuse_lib_readdir, enables arbitrary memory read and write operations in NTFS-3G through 2021.8.22 when using libfuse-lite. | Debian_linux, Fedora, Ntfs\-3g | 6.7 | ||
| 2022-05-26 | CVE-2022-30786 | A crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate in NTFS-3G through 2021.8.22. | Debian_linux, Fedora, Ntfs\-3g | 7.8 | ||
| 2022-05-26 | CVE-2022-30787 | An integer underflow in fuse_lib_readdir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite. | Debian_linux, Fedora, Ntfs\-3g | 6.7 | ||
| 2022-05-26 | CVE-2022-30788 | A crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc in NTFS-3G through 2021.8.22. | Debian_linux, Fedora, Ntfs\-3g | 7.8 | ||
| 2022-05-26 | CVE-2022-30789 | A crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array in NTFS-3G through 2021.8.22. | Debian_linux, Fedora, Ntfs\-3g | 7.8 | ||
| 2022-11-06 | CVE-2022-40284 | A buffer overflow was discovered in NTFS-3G before 2022.10.3. Crafted metadata in an NTFS image can cause code execution. A local attacker can exploit this if the ntfs-3g binary is setuid root. A physically proximate attacker can exploit this if NTFS-3G software is configured to execute upon attachment of an external storage device. | Debian_linux, Fedora, Ntfs\-3g | 7.8 |