Description
A buffer overflow was discovered in NTFS-3G before 2022.10.3. Crafted metadata in an NTFS image can cause code execution. A local attacker can exploit this if the ntfs-3g binary is setuid root. A physically proximate attacker can exploit this if NTFS-3G software is configured to execute upon attachment of an external storage device.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | ntfs-3g | 1:2022.10.3-1 | — |
| Debian 13 | ntfs-3g | 1:2022.10.3-1 | — |
| Debian 12 | ntfs-3g | 1:2022.10.3-1 | — |
| Debian 11 | ntfs-3g | 1:2017.3.23AR.3-4+deb11u3 | DSA-5270-1 |
| Debian 10 | ntfs-3g | 1:2017.3.23AR.3-3+deb10u3 | DLA-3201-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | ntfs-3g | 1:2021.8.22-3ubuntu1.2 | USN-5711-1 |
| Ubuntu 20.04 LTS | ntfs-3g | 1:2017.3.23AR.3-3ubuntu1.3 | USN-5711-1 |
| Ubuntu 18.04 LTS | ntfs-3g | 1:2017.3.23-2ubuntu0.18.04.5 | USN-5711-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 16.04 LTS | ntfs-3g | 1:2015.3.14AR.1-1ubuntu0.3+esm4 | USN-5711-2 |
| Ubuntu Pro 14.04 LTS | ntfs-3g | 1:2013.1.13AR.1-2ubuntu2+esm4 | USN-5711-2 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | libguestfs-winsupport | 9.2-2.el9_2 | RHSA-2023:6167 |
| RHEL 8 | SLOF | 20200717-1.gite18ddad8.module+el8.4.0+8855+a9e237a9 | RHSA-2023:5405, RHSA-2023:5264 |
| RHEL 8 | hivex +6 | 1.3.18-21.module+el8.4.0+11609+2eba841a | RHSA-2023:5405, RHSA-2023:5264 |
| RHEL 8 | libguestfs-appliance | 1:1.44.0-9.module+el8.8.0+16781+9f4724c2 | RHSA-2023:5264 |
| RHEL 8 | libguestfs-winsupport | 8.4-1.module+el8.4.0+19819+df446cdf | RHSA-2023:5405, RHSA-2023:5264 |
| RHEL 8 | libiscsi +2 | 1.18.0-8.module+el8.4.0+8855+a9e237a9 | RHSA-2023:5405, RHSA-2023:5264 |
| RHEL 8 | libnbd +6 | 1.6.0-5.module+el8.4.0+14155+dec4a5c7 | RHSA-2023:5405, RHSA-2023:5264 |
| RHEL 8 | libtpms +1 | 0.7.4-4.20201106git2452a24dab.module+el8.4.0+10596+32ba7df3 | RHSA-2023:5405, RHSA-2023:5264 |
| RHEL 8 | libvirt +29 | 7.0.0-14.8.module+el8.4.0+15255+f7eff4dd | RHSA-2023:5405, RHSA-2023:5264 |
| RHEL 8 | libvirt-dbus | 1.3.0-2.module+el8.4.0+8855+a9e237a9 | RHSA-2023:5405, RHSA-2023:5264 |
| RHEL 8 | nbdkit +18 | 1.24.0-1.module+el8.4.0+9341+96cf2672 | RHSA-2023:5405, RHSA-2023:5264 |
| RHEL 8 | netcf +2 | 0.2.8-12.module+el8.4.0+8855+a9e237a9 | RHSA-2023:5405, RHSA-2023:5264 |
| RHEL 8 | perl-Sys-Virt +2 | 7.0.0-1.module+el8.4.0+9469+2eaf72bc | RHSA-2023:5405, RHSA-2023:5264 |
| RHEL 8 | python-pyvmomi +1 | 6.7.1-7.module+el8.4.0+8855+a9e237a9 | RHSA-2023:5405 |
| RHEL 8 | qemu-img +14 | 15:5.2.0-16.module+el8.4.0+18177+78c83690.19 | RHSA-2023:5405, RHSA-2023:5264 |
| RHEL 8 | qemu-kvm-hw-usbredir | 15:6.2.0-33.module+el8.8.0+19768+98f68f21 | RHSA-2023:5264 |
| RHEL 8 | seabios +2 | 1.14.0-1.module+el8.4.0+8855+a9e237a9 | RHSA-2023:5405, RHSA-2023:5264 |
| RHEL 8 | sgabios +1 | 1:0.20170427git-3.module+el8.4.0+8855+a9e237a9 | RHSA-2023:5405, RHSA-2023:5264 |
| RHEL 8 | supermin +1 | 5.2.1-1.module+el8.4.0+9751+d56db353 | RHSA-2023:5405, RHSA-2023:5264 |
| RHEL 8 | swtpm +3 | 0.4.2-1.20201201git2df14e3.module+el8.4.0+9341+96cf2672 | RHSA-2023:5405, RHSA-2023:5264 |
| RHEL 8 | swtpm-tools-pkcs11 | 0.7.0-4.20211109gitb79fd91.module+el8.8.0+16781+9f4724c2 | RHSA-2023:5264 |
| RHEL 8 | virt-dib +23 | 1:1.44.0-2.module+el8.4.0+10146+75917d2f | RHSA-2023:5405, RHSA-2023:5264 |
| RHEL 8 | virt-v2v +3 | 1:1.42.0-9.module+el8.4.0+9561+069bb9c1 | RHSA-2023:5405, RHSA-2023:5264 |
Show 9 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9.0 EUS | libguestfs-winsupport | 9.0-2.el9_0 | RHSA-2023:6168 |
| RHEL 8.6 EUS | SLOF | 20210217-1.module+el8.6.0+14480+c0a3aa0f | RHSA-2024:0404 |
| RHEL 8.6 EUS | hivex +6 | 1.3.18-23.module+el8.6.0+14480+c0a3aa0f | RHSA-2024:0404 |
| RHEL 8.6 EUS | libguestfs-winsupport | 8.6-2.module+el8.6.0+19818+47334628 | RHSA-2024:0404 |
| RHEL 8.6 EUS | libiscsi +2 | 1.18.0-8.module+el8.6.0+14480+c0a3aa0f | RHSA-2024:0404 |
| RHEL 8.6 EUS | libnbd +6 | 1.6.0-5.module+el8.6.0+14480+c0a3aa0f | RHSA-2024:0404 |
| RHEL 8.6 EUS | libtpms +1 | 0.9.1-1.20211126git1ff6fe1f43.module+el8.6.0+18455+e5d5ac9d | RHSA-2024:0404 |
| RHEL 8.6 EUS | libvirt +27 | 8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3 | RHSA-2024:0404 |
| RHEL 8.6 EUS | libvirt-dbus | 1.3.0-2.module+el8.6.0+14480+c0a3aa0f | RHSA-2024:0404 |
| RHEL 8.6 EUS | libvirt-python +1 | 8.0.0-1.1.module+el8.6.0+16381+3abc475c | RHSA-2024:0404 |
| RHEL 8.6 EUS | nbdkit +18 | 1.24.0-4.module+el8.6.0+14480+c0a3aa0f | RHSA-2024:0404 |
| RHEL 8.6 EUS | netcf +2 | 0.2.8-12.module+el8.6.0+14480+c0a3aa0f | RHSA-2024:0404 |
| RHEL 8.6 EUS | perl-Sys-Virt | 8.0.0-1.module+el8.6.0+14480+c0a3aa0f | RHSA-2024:0404 |
| RHEL 8.6 EUS | qemu-img +14 | 15:6.2.0-11.module+el8.6.0+20793+2184cc28.11 | RHSA-2024:0404 |
| RHEL 8.6 EUS | seabios +2 | 1.15.0-2.module+el8.6.0+19580+39804e41.1 | RHSA-2024:0404 |
| RHEL 8.6 EUS | sgabios +1 | 1:0.20170427git-3.module+el8.6.0+14480+c0a3aa0f | RHSA-2024:0404 |
| RHEL 8.6 EUS | supermin +1 | 5.2.1-1.module+el8.6.0+14480+c0a3aa0f | RHSA-2024:0404 |
| RHEL 8.6 EUS | swtpm +4 | 0.7.0-3.20211109gitb79fd91.module+el8.6.0+16156+d5629340 | RHSA-2024:0404 |
| RHEL 8.6 EUS | virt-dib +24 | 1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f | RHSA-2024:0404 |
| RHEL 8.6 EUS | virt-v2v +3 | 1:1.42.0-19.module+el8.6.0+15577+2ffd6ffa | RHSA-2024:0404 |
| RHEL 8.4 TUS | hivex +1 | 1.3.18-21.module+el8.4.0+10770+19c037f9 | RHSA-2023:5796 |
| RHEL 8.4 TUS | libguestfs +16 | 1:1.40.2-27.module+el8.4.0+9282+0bdec052 | RHSA-2023:5796 |
| RHEL 8.4 E4S | SLOF | 20191022-3.git899d9883.module+el8.3.0+6423+e4cb6418 | RHSA-2023:5796 |
| RHEL 8.4 E4S | hivex +4 | 1.3.18-21.module+el8.4.0+10770+19c037f9 | RHSA-2023:5796 |
| RHEL 8.4 E4S | libguestfs-winsupport | 8.4-1.module+el8.4.0+19830+486a2a6d | RHSA-2023:5796 |
| RHEL 8.4 E4S | libiscsi +2 | 1.18.0-8.module+el8.1.0+4066+0f1aadab | RHSA-2023:5796 |
| RHEL 8.4 E4S | libnbd +3 | 1.2.2-1.module+el8.3.0+7353+9de0a3cc | RHSA-2023:5796 |
| RHEL 8.4 E4S | libvirt +28 | 6.0.0-35.4.module+el8.4.0+16907+31bceb87 | RHSA-2023:5796 |
| RHEL 8.4 E4S | libvirt-dbus | 1.3.0-2.module+el8.3.0+6423+e4cb6418 | RHSA-2023:5796 |
| RHEL 8.4 E4S | nbdkit +13 | 1.16.2-4.module+el8.3.0+6922+fd575af8 | RHSA-2023:5796 |
| RHEL 8.4 E4S | netcf +2 | 0.2.8-12.module+el8.1.0+4066+0f1aadab | RHSA-2023:5796 |
| RHEL 8.4 E4S | perl-Sys-Virt +2 | 6.0.0-1.module+el8.3.0+6423+e4cb6418 | RHSA-2023:5796 |
| RHEL 8.4 E4S | qemu-img +9 | 15:4.2.0-49.module+el8.4.0+19799+49fb6160.10 | RHSA-2023:5796 |
| RHEL 8.4 E4S | seabios +2 | 1.13.0-2.module+el8.3.0+7353+9de0a3cc | RHSA-2023:5796 |
| RHEL 8.4 E4S | sgabios +1 | 1:0.20170427git-3.module+el8.1.0+4066+0f1aadab | RHSA-2023:5796 |
| RHEL 8.4 E4S | supermin +1 | 5.1.19-10.module+el8.3.0+6423+e4cb6418 | RHSA-2023:5796 |
| RHEL 8.4 E4S | virt-dib +23 | 1:1.40.2-27.module+el8.4.0+9282+0bdec052 | RHSA-2023:5796 |
| RHEL 8.4 AUS | hivex +4 | 1.3.18-21.module+el8.4.0+10770+19c037f9 | RHSA-2023:5796 |
| RHEL 8.4 AUS | libguestfs-winsupport | 8.4-1.module+el8.4.0+19830+486a2a6d | RHSA-2023:5796 |
| RHEL 8.4 AUS | libiscsi +2 | 1.18.0-8.module+el8.1.0+4066+0f1aadab | RHSA-2023:5796 |
| RHEL 8.4 AUS | libnbd +3 | 1.2.2-1.module+el8.3.0+7353+9de0a3cc | RHSA-2023:5796 |
| RHEL 8.4 AUS | libvirt +28 | 6.0.0-35.4.module+el8.4.0+16907+31bceb87 | RHSA-2023:5796 |
| RHEL 8.4 AUS | libvirt-dbus | 1.3.0-2.module+el8.3.0+6423+e4cb6418 | RHSA-2023:5796 |
| RHEL 8.4 AUS | nbdkit +13 | 1.16.2-4.module+el8.3.0+6922+fd575af8 | RHSA-2023:5796 |
| RHEL 8.4 AUS | netcf +2 | 0.2.8-12.module+el8.1.0+4066+0f1aadab | RHSA-2023:5796 |
| RHEL 8.4 AUS | perl-Sys-Virt +2 | 6.0.0-1.module+el8.3.0+6423+e4cb6418 | RHSA-2023:5796 |
| RHEL 8.4 AUS | qemu-img +9 | 15:4.2.0-49.module+el8.4.0+19799+49fb6160.10 | RHSA-2023:5796 |
| RHEL 8.4 AUS | seabios +2 | 1.13.0-2.module+el8.3.0+7353+9de0a3cc | RHSA-2023:5796 |
| RHEL 8.4 AUS | sgabios +1 | 1:0.20170427git-3.module+el8.1.0+4066+0f1aadab | RHSA-2023:5796 |
| RHEL 8.4 AUS | supermin +1 | 5.1.19-10.module+el8.3.0+6423+e4cb6418 | RHSA-2023:5796 |
| RHEL 8.4 AUS | virt-dib +23 | 1:1.40.2-27.module+el8.4.0+9282+0bdec052 | RHSA-2023:5796 |
| RHEL 8.2 TUS | hivex +1 | 1.3.15-7.module+el8.1.0+4066+0f1aadab | RHSA-2023:5587 |
| RHEL 8.2 TUS | libguestfs +17 | 1:1.38.4-15.module+el8.2.0+5297+222a20af | RHSA-2023:5587 |
| RHEL 8.2 TUS | libguestfs-winsupport | 8.2-1.module+el8.2.0+19832+6b08672d | RHSA-2023:5587 |
| RHEL 8.2 TUS | libiscsi +2 | 1.18.0-8.module+el8.1.0+4066+0f1aadab | RHSA-2023:5587 |
| RHEL 8.2 TUS | libvirt +17 | 4.5.0-42.1.module+el8.2.0+14235+7beeb3f6 | RHSA-2023:5587 |
| RHEL 8.2 E4S | SLOF | 20171214-6.gitfa98132.module+el8.1.0+4066+0f1aadab | RHSA-2023:5587 |
| RHEL 8.2 E4S | hivex +4 | 1.3.15-7.module+el8.1.0+4066+0f1aadab | RHSA-2023:5587 |
| RHEL 8.2 E4S | libguestfs-winsupport | 8.2-1.module+el8.2.0+19832+6b08672d | RHSA-2023:5587 |
| RHEL 8.2 E4S | libiscsi +2 | 1.18.0-8.module+el8.1.0+4066+0f1aadab | RHSA-2023:5587 |
| RHEL 8.2 E4S | libvirt +27 | 4.5.0-42.1.module+el8.2.0+14235+7beeb3f6 | RHSA-2023:5587 |
| RHEL 8.2 E4S | libvirt-dbus | 1.2.0-3.module+el8.1.0+4066+0f1aadab | RHSA-2023:5587 |
| RHEL 8.2 E4S | libvirt-python +1 | 4.5.0-2.module+el8.1.0+4066+0f1aadab | RHSA-2023:5587 |
| RHEL 8.2 E4S | nbdkit +9 | 1.4.2-5.module+el8.1.0+4066+0f1aadab | RHSA-2023:5587 |
| RHEL 8.2 E4S | netcf +2 | 0.2.8-12.module+el8.1.0+4066+0f1aadab | RHSA-2023:5587 |
| RHEL 8.2 E4S | perl-Sys-Virt | 4.5.0-5.module+el8.1.0+4066+0f1aadab | RHSA-2023:5587 |
| RHEL 8.2 E4S | qemu-img +9 | 15:2.12.0-99.module+el8.2.0+19800+e8ec3bd8.8 | RHSA-2023:5587 |
| RHEL 8.2 E4S | seabios +2 | 1.11.1-4.module+el8.1.0+4066+0f1aadab | RHSA-2023:5587 |
| RHEL 8.2 E4S | sgabios +1 | 1:0.20170427git-3.module+el8.1.0+4066+0f1aadab | RHSA-2023:5587 |
| RHEL 8.2 E4S | supermin +1 | 5.1.19-9.module+el8.1.0+4066+0f1aadab | RHSA-2023:5587 |
| RHEL 8.2 E4S | virt-dib +23 | 1:1.38.4-15.module+el8.2.0+5297+222a20af | RHSA-2023:5587 |
| RHEL 8.2 AUS | hivex +4 | 1.3.15-7.module+el8.1.0+4066+0f1aadab | RHSA-2023:5587 |
| RHEL 8.2 AUS | libguestfs-winsupport | 8.2-1.module+el8.2.0+19832+6b08672d | RHSA-2023:5587 |
| RHEL 8.2 AUS | libiscsi +2 | 1.18.0-8.module+el8.1.0+4066+0f1aadab | RHSA-2023:5587 |
| RHEL 8.2 AUS | libvirt +27 | 4.5.0-42.1.module+el8.2.0+14235+7beeb3f6 | RHSA-2023:5587 |
| RHEL 8.2 AUS | libvirt-dbus | 1.2.0-3.module+el8.1.0+4066+0f1aadab | RHSA-2023:5587 |
| RHEL 8.2 AUS | libvirt-python +1 | 4.5.0-2.module+el8.1.0+4066+0f1aadab | RHSA-2023:5587 |
| RHEL 8.2 AUS | nbdkit +9 | 1.4.2-5.module+el8.1.0+4066+0f1aadab | RHSA-2023:5587 |
| RHEL 8.2 AUS | netcf +2 | 0.2.8-12.module+el8.1.0+4066+0f1aadab | RHSA-2023:5587 |
| RHEL 8.2 AUS | perl-Sys-Virt | 4.5.0-5.module+el8.1.0+4066+0f1aadab | RHSA-2023:5587 |
| RHEL 8.2 AUS | qemu-img +9 | 15:2.12.0-99.module+el8.2.0+19800+e8ec3bd8.8 | RHSA-2023:5587 |
| RHEL 8.2 AUS | seabios +2 | 1.11.1-4.module+el8.1.0+4066+0f1aadab | RHSA-2023:5587 |
| RHEL 8.2 AUS | sgabios +1 | 1:0.20170427git-3.module+el8.1.0+4066+0f1aadab | RHSA-2023:5587 |
| RHEL 8.2 AUS | supermin +1 | 5.1.19-9.module+el8.1.0+4066+0f1aadab | RHSA-2023:5587 |
| RHEL 8.2 AUS | virt-dib +23 | 1:1.38.4-15.module+el8.2.0+5297+222a20af | RHSA-2023:5587 |
| RHEL 8.1 E4S | SLOF | 20171214-6.gitfa98132.module+el8.1.0+4066+0f1aadab | RHSA-2023:5239 |
| RHEL 8.1 E4S | hivex +4 | 1.3.15-7.module+el8.1.0+4066+0f1aadab | RHSA-2023:5239 |
| RHEL 8.1 E4S | libguestfs-winsupport | 8.1-1.module+el8.1.0+19834+dbdce824 | RHSA-2023:5239 |
| RHEL 8.1 E4S | libiscsi +2 | 1.18.0-8.module+el8.1.0+4066+0f1aadab | RHSA-2023:5239 |
| RHEL 8.1 E4S | libvirt +27 | 4.5.0-35.3.module+el8.1.0+5931+8897e7e1 | RHSA-2023:5239 |
| RHEL 8.1 E4S | libvirt-dbus | 1.2.0-3.module+el8.1.0+4066+0f1aadab | RHSA-2023:5239 |
| RHEL 8.1 E4S | libvirt-python +1 | 4.5.0-2.module+el8.1.0+4066+0f1aadab | RHSA-2023:5239 |
| RHEL 8.1 E4S | nbdkit +9 | 1.4.2-5.module+el8.1.0+4066+0f1aadab | RHSA-2023:5239 |
| RHEL 8.1 E4S | netcf +2 | 0.2.8-12.module+el8.1.0+4066+0f1aadab | RHSA-2023:5239 |
| RHEL 8.1 E4S | perl-Sys-Virt | 4.5.0-5.module+el8.1.0+4066+0f1aadab | RHSA-2023:5239 |
| RHEL 8.1 E4S | qemu-img +9 | 15:2.12.0-88.module+el8.1.0+19802+9e50ceca.6 | RHSA-2023:5239 |
| RHEL 8.1 E4S | seabios +2 | 1.11.1-4.module+el8.1.0+4066+0f1aadab | RHSA-2023:5239 |
| RHEL 8.1 E4S | sgabios +1 | 1:0.20170427git-3.module+el8.1.0+4066+0f1aadab | RHSA-2023:5239 |
| RHEL 8.1 E4S | supermin +1 | 5.1.19-9.module+el8.1.0+4066+0f1aadab | RHSA-2023:5239 |
| RHEL 8.1 E4S | virt-dib +24 | 1:1.38.4-14.module+el8.1.0+4066+0f1aadab | RHSA-2023:5239 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | libguestfs-winsupport | 9.2-2.el9_2 | ALSA-2023:6167 |
| AlmaLinux 8 | SLOF | 20210217-1.module_el8.6.0+2880+7d9e3703 | ALSA-2023:5264 |
| AlmaLinux 8 | hivex +6 | 1.3.18-23.module_el8.6.0+2880+7d9e3703 | ALSA-2023:5264 |
| AlmaLinux 8 | libguestfs-winsupport | 8.8-2.module_el8.8.0+3612+f18d2b89 | ALSA-2023:5264 |
| AlmaLinux 8 | libiscsi +2 | 1.18.0-8.module_el8.6.0+2880+7d9e3703 | ALSA-2023:5264 |
| AlmaLinux 8 | libnbd +6 | 1.6.0-5.module_el8.6.0+2880+7d9e3703 | ALSA-2023:5264 |
| AlmaLinux 8 | libtpms +1 | 0.9.1-2.20211126git1ff6fe1f43.module_el8.8.0+3553+bd08596b | ALSA-2023:5264 |
| AlmaLinux 8 | libvirt +27 | 8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma | ALSA-2023:5264 |
| AlmaLinux 8 | libvirt-dbus | 1.3.0-2.module_el8.6.0+2880+7d9e3703 | ALSA-2023:5264 |
| AlmaLinux 8 | nbdkit +18 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 | ALSA-2023:5264 |
| AlmaLinux 8 | netcf +2 | 0.2.8-12.module_el8.6.0+2880+7d9e3703 | ALSA-2023:5264 |
| AlmaLinux 8 | perl-Sys-Virt | 8.0.0-1.module_el8.6.0+2880+7d9e3703 | ALSA-2023:5264 |
| AlmaLinux 8 | python3-libvirt | 8.0.0-2.module_el8.7.0+3346+68867adb | ALSA-2023:5264 |
| AlmaLinux 8 | qemu-img +14 | 15:6.2.0-33.module_el8.8.0+3612+f18d2b89.alma.1 | ALSA-2023:5264 |
| AlmaLinux 8 | seabios +2 | 1.16.0-4.module_el8.8.0+3612+f18d2b89 | ALSA-2023:5264 |
| AlmaLinux 8 | sgabios +1 | 1:0.20170427git-3.module_el8.6.0+2880+7d9e3703 | ALSA-2023:5264 |
| AlmaLinux 8 | supermin +1 | 5.2.1-2.module_el8.7.0+3346+68867adb | ALSA-2023:5264 |
| AlmaLinux 8 | swtpm +4 | 0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb | ALSA-2023:5264 |
| AlmaLinux 8 | virt-dib +24 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma | ALSA-2023:5264 |
| AlmaLinux 8 | virt-v2v +3 | 1:1.42.0-22.module_el8.8.0+3553+bd08596b | ALSA-2023:5264 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 8 | hivex | 1.3.18-23.module+el8.10.0+1590+a67ab969 | RLSA-2023:5264 |
| Rocky Linux 8 | libguestfs | 1:1.44.0-9.module+el8.10.0+1590+a67ab969.rocky | RLSA-2023:5264 |
| Rocky Linux 8 | libiscsi | 1.18.0-8.module+el8.10.0+1590+a67ab969 | RLSA-2023:5264 |
| Rocky Linux 8 | libnbd | 1.6.0-5.module+el8.10.0+1590+a67ab969 | RLSA-2023:5264 |
| Rocky Linux 8 | libtpms | 0.9.1-2.20211126git1ff6fe1f43.module+el8.10.0+1590+a67ab969 | RLSA-2023:5264 |
| Rocky Linux 8 | libvirt-dbus | 1.3.0-2.module+el8.10.0+1590+a67ab969 | RLSA-2023:5264 |
| Rocky Linux 8 | libvirt-python | 8.0.0-2.module+el8.10.0+1590+a67ab969 | RLSA-2023:5264 |
| Rocky Linux 8 | nbdkit | 1.24.0-5.module+el8.10.0+1590+a67ab969 | RLSA-2023:5264 |
| Rocky Linux 8 | netcf | 0.2.8-12.module+el8.10.0+1590+a67ab969 | RLSA-2023:5264 |
| Rocky Linux 8 | perl-Sys-Virt | 8.0.0-1.module+el8.10.0+1590+a67ab969 | RLSA-2023:5264 |
| Rocky Linux 8 | seabios | 1.16.0-4.module+el8.9.0+1408+7b966129 | RLSA-2023:5264 |
| Rocky Linux 8 | sgabios | 1:0.20170427git-3.module+el8.10.0+1590+a67ab969 | RLSA-2023:5264 |
| Rocky Linux 8 | supermin | 5.2.1-2.module+el8.10.0+1590+a67ab969 | RLSA-2023:5264 |
| Rocky Linux 8 | swtpm | 0.7.0-4.20211109gitb79fd91.module+el8.10.0+1590+a67ab969 | RLSA-2023:5264 |
| Rocky Linux 8 | virt-v2v | 1:1.42.0-22.module+el8.10.0+1590+a67ab969 | RLSA-2023:5264 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP4 | ntfs-3g_ntfsprogs | 2022.5.17-150000.3.16.1 | SUSE-SU-2022:3866-1 |
| SLES 15 SP3 | ntfs-3g_ntfsprogs | 2022.5.17-150000.3.16.1 | SUSE-SU-2022:3866-1 |
| SLES 12 SP5 | ntfs-3g_ntfsprogs | 2022.5.17-5.17.1 | SUSE-SU-2022:3865-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | ntfs-3g_ntfsprogs | 2022.10.3-1.1 | openSUSE-SU-2024:12473-1 |
| openSUSE Leap 15.4 | ntfs-3g_ntfsprogs | 2022.5.17-150000.3.16.1 | SUSE-SU-2022:3866-1 |
| openSUSE Leap 15.3 | ntfs-3g_ntfsprogs | 2022.5.17-150000.3.16.1 | SUSE-SU-2022:3866-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | ntfs-3g | 2022.10.3-r0 | — |
| Alpine v3.23 | ntfs-3g | 2022.10.3-r0 | — |
| Alpine v3.22 | ntfs-3g | 2022.10.3-r0 | — |
| Alpine v3.21 | ntfs-3g | 2022.10.3-r0 | — |
| Alpine v3.20 | ntfs-3g | 2022.10.3-r0 | — |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | ntfs-3g | 2022.10.3-r0 | — |
| Alpine v3.18 | ntfs-3g | 2022.10.3-r0 | — |
| Alpine v3.17 | ntfs-3g | 2022.10.3-r0 | — |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 2 (CBL-Mariner) | ntfs-3g | 2022.10.3-1 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | libguestfs-winsupport | 9.2-2.el9_2 | ELSA-2023-6167 |
| Oracle Linux 8 | hivex +6 | 1.3.18-23.module+el8.8.0+20990+60c1530a | ELSA-2023-5264 |
| Oracle Linux 8 | libguestfs-winsupport | 8.8-2.module+el8.8.0+21164+ed375313 | ELSA-2023-5264 |
| Oracle Linux 8 | libiscsi +2 | 1.18.0-8.module+el8.8.0+20990+60c1530a | ELSA-2023-5264 |
| Oracle Linux 8 | libnbd +6 | 1.6.0-5.module+el8.8.0+20990+60c1530a | ELSA-2023-5264 |
| Oracle Linux 8 | libtpms +1 | 0.9.1-2.20211126git1ff6fe1f43.module+el8.8.0+21044+01700444 | ELSA-2023-5264 |
| Oracle Linux 8 | libvirt +27 | 8.0.0-19.0.2.module+el8.8.0+21112+1cc1a24b | ELSA-2023-5264 |
| Oracle Linux 8 | libvirt-dbus | 1.3.0-2.module+el8.8.0+20990+60c1530a | ELSA-2023-5264 |
| Oracle Linux 8 | nbdkit +18 | 1.24.0-5.module+el8.8.0+20990+60c1530a | ELSA-2023-5264 |
| Oracle Linux 8 | netcf +2 | 0.2.8-12.module+el8.8.0+20990+60c1530a | ELSA-2023-5264 |
| Oracle Linux 8 | perl-Sys-Virt | 8.0.0-1.module+el8.8.0+20990+60c1530a | ELSA-2023-5264 |
| Oracle Linux 8 | python3-libvirt | 8.0.0-2.module+el8.8.0+20990+60c1530a | ELSA-2023-5264 |
| Oracle Linux 8 | qemu-img +14 | 15:6.2.0-33.module+el8.8.0+21164+ed375313 | ELSA-2023-5264 |
| Oracle Linux 8 | seabios +2 | 1.16.0-4.module+el8.8.0+21164+ed375313 | ELSA-2023-5264 |
| Oracle Linux 8 | sgabios +1 | 1:0.20170427git-3.module+el8.8.0+20990+60c1530a | ELSA-2023-5264 |
| Oracle Linux 8 | supermin +1 | 5.2.1-2.0.1.module+el8.8.0+21149+63104b48 | ELSA-2023-5264 |
| Oracle Linux 8 | swtpm +4 | 0.7.0-4.20211109gitb79fd91.module+el8.8.0+20990+60c1530a | ELSA-2023-5264 |
| Oracle Linux 8 | virt-dib +24 | 1:1.44.0-9.0.2.module+el8.8.0+21153+75c20b54 | ELSA-2023-5264 |
| Oracle Linux 8 | virt-v2v +3 | 1:1.42.0-22.module+el8.8.0+21112+1cc1a24b | ELSA-2023-5264 |
Advisories 21
- ALSA-2023:5264 Important: virt:rhel and virt-devel:rhel security and bug fix update AlmaLinux Security Advisories · Nov 2, 2026
- ALSA-2023:6167 Low: libguestfs-winsupport security update AlmaLinux Security Advisories · Oct 29, 2026
- USN-5711-2 ntfs-3g vulnerability Ubuntu Security Notices (USN) · Jun 29, 2026
- RHSA-2024:0404 Red Hat Security Advisory: virt:rhel and virt-devel:rhel security update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- RHSA-2023:6167 Red Hat Security Advisory: libguestfs-winsupport security update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- RHSA-2023:6168 Red Hat Security Advisory: libguestfs-winsupport security update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- RHSA-2023:5796 Red Hat Security Advisory: virt:rhel security update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- RHSA-2023:5587 Red Hat Security Advisory: virt:rhel security update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- RHSA-2023:5405 Red Hat Security Advisory: virt:av and virt-devel:av security update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- RHSA-2023:5264 Red Hat Security Advisory: virt:rhel and virt-devel:rhel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- RHSA-2023:5239 Red Hat Security Advisory: virt:rhel and virt-devel:rhel security update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- USN-5711-1 ntfs-3g vulnerability Ubuntu Security Notices (USN) · Apr 22, 2026
- WID-SEC-2023-2780 Red Hat Enterprise Linux: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Mar 26, 2026
- RLSA-2023:5264 Important: virt:rhel and virt-devel:rhel security and bug fix update Rocky Linux Security Advisories · Mar 23, 2026
- DSA-5270-1 ntfs-3g - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-3201-1 ntfs-3g - security update Debian Security (DSA / DLA) · Mar 9, 2026
- ELSA-2023-5264 Important: virt:ol and virt-devel:ol security and bug fix update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Feb 16, 2026
- SUSE-SU-2022:3866-1 Security update for ntfs-3g_ntfsprogs SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:3865-1 Security update for ntfs-3g_ntfsprogs SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:12473-1 libntfs-3g-devel-2022.10.3-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- ELSA-2023-6167 Low: libguestfs-winsupport security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Oct 30, 2023
References
- https://github.com/tuxera/ntfs-3g/releases
- http://www.openwall.com/lists/oss-security/2022/10/31/2
- [debian-lts-announce] 20221121 [SECURITY] [DLA 3201-1] ntfs-3g security update mailing-list
- FEDORA-2022-4915124227 vendor-advisory
- FEDORA-2022-14f11bfc73 vendor-advisory
- FEDORA-2022-243616c548 vendor-advisory
- GLSA-202301-01 vendor-advisory