Summary
It was discovered that NTFS-3G was incorrectly validating NTFS
metadata in its ntfsck tool by not performing boundary checks. A
local attacker could possibly use this issue to cause a denial of
service or to execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | ntfs-3g | 1:2013.1.13AR.1-2ubuntu2+esm2 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | ntfs-3g | 1:2015.3.14AR.1-1ubuntu0.3+esm2 |
Vulnerabilities 1
-
Unscored —
ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+512*3-2. NOTE: the upstream posit…
References
-
report
https://ubuntu.com/security/CVE-2021-46790