Описание
A crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value in NTFS-3G through 2021.8.22.
A vulnerability was found in NTFS-3G. Incorrect validation of NTFS metadata can result in a heap exhaustion when processing a crafted NTFS image file or partition.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 7 | libguestfs-winsupport | Out of support scope | ||
| Red Hat Enterprise Linux 8 Advanced Virtualization | virt:8.2/libguestfs-winsupport | Will not fix | ||
| Red Hat Enterprise Linux 8 Advanced Virtualization | virt:av/libguestfs-winsupport | Will not fix | ||
| Red Hat Enterprise Linux 8 Advanced Virtualization | virt-devel:8.2/libguestfs-winsupport | Will not fix | ||
| Red Hat Enterprise Linux 8 Advanced Virtualization | virt-devel:av/libguestfs-winsupport | Will not fix | ||
| Red Hat Enterprise Linux 8 | virt-devel | Fixed | RHSA-2023:2757 | 16.05.2023 |
| Red Hat Enterprise Linux 8 | virt | Fixed | RHSA-2023:2757 | 16.05.2023 |
| Red Hat Enterprise Linux 9 | libguestfs-winsupport | Fixed | RHSA-2023:2179 | 09.05.2023 |
Показывать по
10
Дополнительная информация
Статус:
Moderate
Дефект:
CWE-120
https://bugzilla.redhat.com/show_bug.cgi?id=2093314ntfs-3g: crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value
EPSS
Процентиль: 9%
0.00035
Низкий
7.8 High
CVSS3
Связанные уязвимости
CVSS3: 7.8
ubuntu
около 3 лет назад
A crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value in NTFS-3G through 2021.8.22.
CVSS3: 7.8
nvd
около 3 лет назад
A crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value in NTFS-3G through 2021.8.22.
CVSS3: 7.8
debian
около 3 лет назад
A crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_v ...
CVSS3: 6.8
github
около 3 лет назад
A crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value in NTFS-3G through 2021.8.22.
EPSS
Процентиль: 9%
0.00035
Низкий
7.8 High
CVSS3