CVE-2022-30789: Buffer Overflow
Published May 26, 2022
·Updated
A crafted NTFS image can cause a heap-based buffer overflow in ntfschecklogclientarray in NTFS-3G through 2021.8.22.
Affected Software
8 affected componentsFixes available
debian/ntfs-3g
1:2017.3.23AR.3-3+deb10u21:2017.3.23AR.3-3+deb10u31:2017.3.23AR.3-4+deb11u31:2022.10.3-1
redhat/ntfs-3g<2022.5.17
2022.5.17
tuxera NTFS-3G<=2021.8.22
Debian Debian Linux=9.0
Debian Debian Linux=10.0
Debian Debian Linux=11.0
Fedoraproject Fedora=35
Fedoraproject Fedora=36
Event History
May 26, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-30789?
CVE-2022-30789 is classified as a high severity vulnerability due to its potential for causing a heap-based buffer overflow.
2
How do I fix CVE-2022-30789?
To mitigate CVE-2022-30789, update to a fixed version of ntfs-3g, such as 2022.5.17 or later.
3
Which systems are affected by CVE-2022-30789?
CVE-2022-30789 affects various systems running ntfs-3g versions up to 2021.8.22, including Debian and Fedora.
4
What types of attacks can exploit CVE-2022-30789?
CVE-2022-30789 can be exploited through specially crafted NTFS images that trigger a buffer overflow.
5
Is CVE-2022-30789 patched in latest distributions?
Yes, CVE-2022-30789 has been patched in the latest versions of ntfs-3g released after 2022.5.17.