CVE-2022-30788: Buffer Overflow
Published May 26, 2022
·Updated
A crafted NTFS image can cause a heap-based buffer overflow in ntfsmftrecalloc in NTFS-3G through 2021.8.22.
Affected Software
8 affected componentsFixes available
debian/ntfs-3g
1:2017.3.23AR.3-3+deb10u21:2017.3.23AR.3-3+deb10u31:2017.3.23AR.3-4+deb11u31:2022.10.3-1
redhat/ntfs-3g<2022.5.17
2022.5.17
tuxera NTFS-3G<=2021.8.22
Fedoraproject Fedora=35
Fedoraproject Fedora=36
Debian Debian Linux=9.0
Debian Debian Linux=10.0
Debian Debian Linux=11.0
Event History
May 26, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-30788?
CVE-2022-30788 is classified as a high severity vulnerability due to its potential to cause a heap-based buffer overflow.
2
How do I fix CVE-2022-30788?
To remediate CVE-2022-30788, upgrade to ntfs-3g version 2022.5.17 or later.
3
Which software is affected by CVE-2022-30788?
CVE-2022-30788 affects ntfs-3g versions prior to 2022.5.17 and certain versions of Debian, Red Hat, and Fedora.
4
What type of vulnerability is CVE-2022-30788?
CVE-2022-30788 is a heap-based buffer overflow vulnerability within the ntfs_mft_rec_alloc function in NTFS-3G.
5
When was CVE-2022-30788 discovered?
CVE-2022-30788 was publicly disclosed in May 2022.