Summary
Yuchen Zeng and Eduardo Vela discovered that NTFS-3G incorrectly validated
certain NTFS metadata. A local attacker could possibly use this issue to
gain privileges.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | ntfs-3g | 1:2017.3.23-2ubuntu0.18.04.5 |
| Ubuntu · 20.04 LTS 20.04:LTS | ntfs-3g | 1:2017.3.23AR.3-3ubuntu1.3 |
| Ubuntu · 22.04 LTS 22.04:LTS | ntfs-3g | 1:2021.8.22-3ubuntu1.2 |
Vulnerabilities 1
-
High 7.8
A buffer overflow was discovered in NTFS-3G before 2022.10.3. Crafted metadata in an NTFS image can cause code executio…
References
-
report
https://ubuntu.com/security/CVE-2022-40284