CVE-2022-30786: Buffer Overflow
Published May 26, 2022
·Updated
A crafted NTFS image can cause a heap-based buffer overflow in ntfsnamesfullcollate in NTFS-3G through 2021.8.22.
Affected Software
8 affected componentsFixes available
debian/ntfs-3g
1:2017.3.23AR.3-3+deb10u21:2017.3.23AR.3-3+deb10u31:2017.3.23AR.3-4+deb11u31:2022.10.3-1
redhat/ntfs-3g<2022.5.17
2022.5.17
tuxera NTFS-3G<=2021.8.22
Fedoraproject Fedora=35
Fedoraproject Fedora=36
Debian Debian Linux=9.0
Debian Debian Linux=10.0
Debian Debian Linux=11.0
Event History
May 26, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-30786?
CVE-2022-30786 has a high severity level due to a heap-based buffer overflow vulnerability.
2
How do I fix CVE-2022-30786?
To fix CVE-2022-30786, upgrade to NTFS-3G versions 2022.5.17 or above, or the corresponding patched versions for Debian, Red Hat, and Fedora distributions.
3
Which versions of NTFS-3G are affected by CVE-2022-30786?
CVE-2022-30786 affects NTFS-3G versions prior to 2022.5.17 and specific older versions listed for various distributions.
4
What type of vulnerability is CVE-2022-30786?
CVE-2022-30786 is a heap-based buffer overflow vulnerability in the NTFS-3G file system driver.
5
Can CVE-2022-30786 be exploited remotely?
Yes, CVE-2022-30786 can potentially be exploited remotely through malicious NTFS images.