Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

tuxera ntfs-3g vulnerabilities and exploits

(subscribe to this query)
7.8
CVSSv3
CVE-2022-40284
A buffer overflow exists in NTFS-3G prior to 2022.10.3. Crafted metadata in an NTFS image can cause code execution. A local attacker can exploit this if the ntfs-3g binary is setuid root. A physically proximate attacker can exploit this if NTFS-3G software is configured to execut...
Tuxera Ntfs-3gDebian Debian Linux 10.0Fedoraproject Fedora 35Fedoraproject Fedora 36Fedoraproject Fedora 37
6.7
CVSSv3
CVE-2022-30783
An invalid return code in fuse_kern_mount enables intercepting of libfuse-lite protocol traffic between NTFS-3G and the kernel in NTFS-3G up to and including 2021.8.22 when using libfuse-lite.
Tuxera Ntfs-3gFedoraproject Fedora 35Fedoraproject Fedora 36Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0
7.8
CVSSv3
CVE-2022-30784
A crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value in NTFS-3G up to and including 2021.8.22.
Tuxera Ntfs-3gDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 35Fedoraproject Fedora 36
6.7
CVSSv3
CVE-2022-30785
A file handle created in fuse_lib_opendir, and later used in fuse_lib_readdir, enables arbitrary memory read and write operations in NTFS-3G up to and including 2021.8.22 when using libfuse-lite.
Tuxera Ntfs-3gFedoraproject Fedora 35Fedoraproject Fedora 36Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0
7.8
CVSSv3
CVE-2022-30786
A crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate in NTFS-3G up to and including 2021.8.22.
Tuxera Ntfs-3gFedoraproject Fedora 35Fedoraproject Fedora 36Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0
6.7
CVSSv3
CVE-2022-30787
An integer underflow in fuse_lib_readdir enables arbitrary memory read operations in NTFS-3G up to and including 2021.8.22 when using libfuse-lite.
Tuxera Ntfs-3gFedoraproject Fedora 35Fedoraproject Fedora 36Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0
7.8
CVSSv3
CVE-2022-30788
A crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc in NTFS-3G up to and including 2021.8.22.
Tuxera Ntfs-3gFedoraproject Fedora 35Fedoraproject Fedora 36Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0
7.8
CVSSv3
CVE-2022-30789
A crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array in NTFS-3G up to and including 2021.8.22.
Tuxera Ntfs-3gDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 35Fedoraproject Fedora 36
7.8
CVSSv3
CVE-2021-46790
ntfsck in NTFS-3G up to and including 2021.8.22 has a heap-based buffer overflow involving buffer+512*3-2. NOTE: the upstream position is that ntfsck is deprecated; however, it is shipped by some Linux distributions.
Tuxera Ntfs-3gDebian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 35Fedoraproject Fedora 36
7.8
CVSSv3
CVE-2021-39251
A crafted NTFS image can cause a NULL pointer dereference in ntfs_extent_inode_open in NTFS-3G < 2021.8.22.
Tuxera Ntfs-3gDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Redhat Enterprise Linux 7.0Redhat Enterprise Linux 8.0Fedoraproject Fedora 33Fedoraproject Fedora 35
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3581reflected XSSCVE-2024-26925CVE-2024-27956LFICVE-2024-3607CVE-2024-3107CVE-2024-3295SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook