Summary
It was discovered that exfatprogs incorrectly handled certain memory
operations. If a user or automated system were tricked into handling
specially crafted exfat partitions, a remote attacker could use this issue
to cause exfatprogs to crash, resulting in a denial of service, or possibly
execute arbitrary code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | exfatprogs | 1.1.3-1ubuntu0.1 |
Vulnerabilities 1
-
Unscored —
exfatprogs before 1.2.2 allows out-of-bounds memory access, such as in read_file_dentry_set.
References
-
report
https://ubuntu.com/security/CVE-2023-45897