PT-2021-5804 · Ntfs-3G+7 · Ntfs-3G+7

CVE-2021-39263

·

Published

2021-08-17

·

Updated

2023-01-13

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions NTFS-3G versions prior to 2021.8.22
Description A crafted NTFS image can trigger a heap-based buffer overflow, caused by an unsanitized attribute in ntfs get attribute value. This issue may allow an attacker to access confidential data, compromise data integrity, and cause a denial of service.
Recommendations For versions prior to 2021.8.22, update to version 2021.8.22 or later to resolve the issue. As a temporary workaround, consider restricting the use of NTFS images from untrusted sources to minimize the risk of exploitation.

Fix

Memory Corruption

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2022:1759
ALT-PU-2021-2673
ALT-PU-2021-2730
ALT-PU-2021-2767
ALT-PU-2022-2244
AZL-6768
BDU:2022-00263
CESA-2022_1759
CVE-2021-39263
DLA-2819-1
DSA-4971-1
GHSA-Q759-8J5V-Q5JP
MGASA-2022-0001
OESA-2021-1365
OPENSUSE-SU-2021:1244-1
OPENSUSE-SU-2021:2971-1
OPENSUSE-SU-2021_1244-1
OPENSUSE-SU-2021_2971-1
RHSA-2021:3703
RHSA-2021:3704
RHSA-2022:1759
RHSA-2022_1759
RLSA-2022:1759
SUSE-SU-2021:2965-1
SUSE-SU-2021:2971-1
USN-5060-1
USN-5060-2

Affected Products

Alt Linux
Almalinux
Astra Linux
Centos
Ntfs-3G
Red Hat
Rocky Linux
Suse