Most severe vulnerabilities for "ntfs-3g" 2021.8.22

Where

AND

Sort:

debian/ntfs-3gBuffer Overflow

Risk 69

Severity

7.8

Buffer Overflow

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+5123-2. NOTE: the upstream position is that ntfsck is deprecated; however, it is shipped by some Linux distributions.

1 / 2

First published (updated )

CVE-2021-46790

debian/ntfs-3gInput Validation

Risk 69

Severity

7.8

Input Validation

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A crafted NTFS image can cause heap exhaustion in ntfsgetattributevalue in NTFS-3G through 2021.8.22.

1 / 2

First published (updated )

CVE-2022-30784

debian/ntfs-3gBuffer Overflow, Input Validation

Risk 69

Severity

7.8

Buffer Overflow, Input Validation

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A crafted NTFS image can cause a heap-based buffer overflow in ntfsnamesfullcollate in NTFS-3G through 2021.8.22.

1 / 2

First published (updated )

CVE-2022-30786

debian/ntfs-3gBuffer Overflow, Input Validation

Risk 69

Severity

7.8

Buffer Overflow, Input Validation

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A crafted NTFS image can cause a heap-based buffer overflow in ntfsmftrecalloc in NTFS-3G through 2021.8.22.

1 / 2

First published (updated )

CVE-2022-30788

debian/ntfs-3gBuffer Overflow, Input Validation

Risk 69

Severity

7.8

Buffer Overflow, Input Validation

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A crafted NTFS image can cause a heap-based buffer overflow in ntfschecklogclientarray in NTFS-3G through 2021.8.22.

1 / 2

First published (updated )

CVE-2022-30789

debian/ntfs-3gA file handle created in fuse_lib_opendir, and later used in fuse_lib_readdir, enables arbitrary mem…

Risk 63

Severity

7.2

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

A file handle created in fuselibopendir, and later used in fuselibreaddir, enables arbitrary memory read and write operations in NTFS-3G through 2021.8.22 when using libfuse-lite.

First published (updated )

CVE-2022-30785

debian/ntfs-3gAn invalid return code in fuse_kern_mount enables intercepting of libfuse-lite protocol traffic betw…

Risk 60

Severity

6.7

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

An invalid return code in fusekernmount enables intercepting of libfuse-lite protocol traffic between NTFS-3G and the kernel in NTFS-3G through 2021.8.22 when using libfuse-lite.

First published (updated )

CVE-2022-30783

debian/ntfs-3gInteger Underflow

Risk 60

Severity

6.7

Integer Underflow

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

An integer underflow in fuselibreaddir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite.

First published (updated )

CVE-2022-30787

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Trending

Company

Resources

Contact