Описание
In NTFS-3G versions < 2021.8.22, when a specially crafted NTFS attribute is supplied to the function ntfs_get_attribute_value, a heap buffer overflow can occur allowing for memory disclosure or denial of service. The vulnerability is caused by an out-of-bound buffer access which can be triggered by mounting a crafted ntfs partition. The root cause is a missing consistency check after reading an MFT record : the "bytes_in_use" field should be less than the "bytes_allocated" field. When it is not, the parsing of the records proceeds into the wild.
The ntfs3g package is susceptible to a heap overflow on crafted input. When processing NTFS attributes, proper bounds checking was not enforced leading to this software flaw. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
Затронутые пакеты
Платформа | Пакет | Состояние | Рекомендация | Релиз |
---|---|---|---|---|
Red Hat Enterprise Linux 7 | libguestfs-winsupport | Out of support scope | ||
Red Hat Enterprise Linux 8 Advanced Virtualization | virt:8.2/libguestfs-winsupport | Affected | ||
Red Hat Enterprise Linux 8 Advanced Virtualization | virt:av/libguestfs-winsupport | Affected | ||
Red Hat Enterprise Linux 9 | libguestfs-winsupport | Affected | ||
Advanced Virtualization for RHEL 8.2.1 | virt | Fixed | RHSA-2021:3704 | 30.09.2021 |
Advanced Virtualization for RHEL 8.2.1 | virt-devel | Fixed | RHSA-2021:3704 | 30.09.2021 |
Advanced Virtualization for RHEL 8.4.0.Z | virt | Fixed | RHSA-2021:3703 | 30.09.2021 |
Advanced Virtualization for RHEL 8.4.0.Z | virt-devel | Fixed | RHSA-2021:3703 | 30.09.2021 |
Red Hat Enterprise Linux 8 | virt-devel | Fixed | RHSA-2022:1759 | 10.05.2022 |
Red Hat Enterprise Linux 8 | virt | Fixed | RHSA-2022:1759 | 10.05.2022 |
Показывать по
Дополнительная информация
Статус:
7.8 High
CVSS3
Связанные уязвимости
In NTFS-3G versions < 2021.8.22, when a specially crafted NTFS attribute is supplied to the function ntfs_get_attribute_value, a heap buffer overflow can occur allowing for memory disclosure or denial of service. The vulnerability is caused by an out-of-bound buffer access which can be triggered by mounting a crafted ntfs partition. The root cause is a missing consistency check after reading an MFT record : the "bytes_in_use" field should be less than the "bytes_allocated" field. When it is not, the parsing of the records proceeds into the wild.
In NTFS-3G versions < 2021.8.22, when a specially crafted NTFS attribute is supplied to the function ntfs_get_attribute_value, a heap buffer overflow can occur allowing for memory disclosure or denial of service. The vulnerability is caused by an out-of-bound buffer access which can be triggered by mounting a crafted ntfs partition. The root cause is a missing consistency check after reading an MFT record : the "bytes_in_use" field should be less than the "bytes_allocated" field. When it is not, the parsing of the records proceeds into the wild.
In NTFS-3G versions < 2021.8.22, when a specially crafted NTFS attribu ...
Уязвимость реализации функции ntfs_get_attribute_value драйвера файловой системы NTFS для модуля FUSE NTFS-3G, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации или вызвать отказ в обслуживании
7.8 High
CVSS3