Описание
In NTFS-3G versions < 2021.8.22, when a specially crafted NTFS attribute is supplied to the function ntfs_get_attribute_value, a heap buffer overflow can occur allowing for memory disclosure or denial of service. The vulnerability is caused by an out-of-bound buffer access which can be triggered by mounting a crafted ntfs partition. The root cause is a missing consistency check after reading an MFT record : the "bytes_in_use" field should be less than the "bytes_allocated" field. When it is not, the parsing of the records proceeds into the wild.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 1:2017.3.23-2ubuntu0.18.04.3 |
| devel | released | 1:2017.3.23AR.3-3ubuntu5 |
| esm-infra-legacy/trusty | not-affected | 1:2013.1.13AR.1-2ubuntu2+esm1 |
| esm-infra/bionic | not-affected | 1:2017.3.23-2ubuntu0.18.04.3 |
| esm-infra/focal | not-affected | 1:2017.3.23AR.3-3ubuntu1.1 |
| esm-infra/xenial | released | 1:2015.3.14AR.1-1ubuntu0.3+esm1 |
| focal | released | 1:2017.3.23AR.3-3ubuntu1.1 |
| hirsute | released | 1:2017.3.23AR.3-3ubuntu4.1 |
| impish | released | 1:2017.3.23AR.3-3ubuntu5 |
| jammy | released | 1:2017.3.23AR.3-3ubuntu5 |
Показывать по
EPSS
6.9 Medium
CVSS2
7.8 High
CVSS3
Связанные уязвимости
In NTFS-3G versions < 2021.8.22, when a specially crafted NTFS attribute is supplied to the function ntfs_get_attribute_value, a heap buffer overflow can occur allowing for memory disclosure or denial of service. The vulnerability is caused by an out-of-bound buffer access which can be triggered by mounting a crafted ntfs partition. The root cause is a missing consistency check after reading an MFT record : the "bytes_in_use" field should be less than the "bytes_allocated" field. When it is not, the parsing of the records proceeds into the wild.
In NTFS-3G versions < 2021.8.22, when a specially crafted NTFS attribute is supplied to the function ntfs_get_attribute_value, a heap buffer overflow can occur allowing for memory disclosure or denial of service. The vulnerability is caused by an out-of-bound buffer access which can be triggered by mounting a crafted ntfs partition. The root cause is a missing consistency check after reading an MFT record : the "bytes_in_use" field should be less than the "bytes_allocated" field. When it is not, the parsing of the records proceeds into the wild.
In NTFS-3G versions < 2021.8.22, when a specially crafted NTFS attribu ...
Уязвимость реализации функции ntfs_get_attribute_value драйвера файловой системы NTFS для модуля FUSE NTFS-3G, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации или вызвать отказ в обслуживании
EPSS
6.9 Medium
CVSS2
7.8 High
CVSS3