Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2022:3866-1

Опубликовано: 03 нояб. 2022
Источник: suse-cvrf

Описание

Security update for ntfs-3g_ntfsprogs

This update for ntfs-3g_ntfsprogs fixes the following issues:

  • CVE-2022-40284: Fixed incorrect validation of some of the NTFS metadata that could cause buffer overflow (bsc#1204734).

Список пакетов

Container suse/sles/15.6/libguestfs-tools:1.1.1
libntfs-3g87-2022.5.17-150000.3.16.1
ntfs-3g-2022.5.17-150000.3.16.1
ntfsprogs-2022.5.17-150000.3.16.1
Container suse/sles/15.7/libguestfs-tools:1.4.0
libntfs-3g87-2022.5.17-150000.3.16.1
ntfs-3g-2022.5.17-150000.3.16.1
ntfsprogs-2022.5.17-150000.3.16.1
SUSE Linux Enterprise Workstation Extension 15 SP3
libntfs-3g-devel-2022.5.17-150000.3.16.1
libntfs-3g87-2022.5.17-150000.3.16.1
ntfs-3g-2022.5.17-150000.3.16.1
ntfsprogs-2022.5.17-150000.3.16.1
SUSE Linux Enterprise Workstation Extension 15 SP4
libntfs-3g-devel-2022.5.17-150000.3.16.1
libntfs-3g87-2022.5.17-150000.3.16.1
ntfs-3g-2022.5.17-150000.3.16.1
ntfsprogs-2022.5.17-150000.3.16.1
openSUSE Leap 15.3
libntfs-3g-devel-2022.5.17-150000.3.16.1
libntfs-3g87-2022.5.17-150000.3.16.1
ntfs-3g-2022.5.17-150000.3.16.1
ntfsprogs-2022.5.17-150000.3.16.1
ntfsprogs-extra-2022.5.17-150000.3.16.1
openSUSE Leap 15.4
libntfs-3g-devel-2022.5.17-150000.3.16.1
libntfs-3g87-2022.5.17-150000.3.16.1
ntfs-3g-2022.5.17-150000.3.16.1
ntfsprogs-2022.5.17-150000.3.16.1
ntfsprogs-extra-2022.5.17-150000.3.16.1

Ссылки

Описание

A buffer overflow was discovered in NTFS-3G before 2022.10.3. Crafted metadata in an NTFS image can cause code execution. A local attacker can exploit this if the ntfs-3g binary is setuid root. A physically proximate attacker can exploit this if NTFS-3G software is configured to execute upon attachment of an external storage device.

Затронутые продукты
Container suse/sles/15.6/libguestfs-tools:1.1.1:libntfs-3g87-2022.5.17-150000.3.16.1
Container suse/sles/15.6/libguestfs-tools:1.1.1:ntfs-3g-2022.5.17-150000.3.16.1
Container suse/sles/15.6/libguestfs-tools:1.1.1:ntfsprogs-2022.5.17-150000.3.16.1
Container suse/sles/15.7/libguestfs-tools:1.4.0:libntfs-3g87-2022.5.17-150000.3.16.1
Ссылки