CVE-2021-39254 — Integer Overflow or Wraparound in Ntfs-3g

CWE-190 — Integer Overflow or Wraparound CWE-20 — Improper Input Validation CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer7 documents7 sources

Severity

7.8HIGHNVD

EPSS

0.0%

top 94.01%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Tuxera Ntfs-3g Debian Linux Fedoraproject Fedora

Timeline

PublishedSep 7

Latest updateMay 24

Description

A crafted NTFS image can cause an integer overflow in memmove, leading to a heap-based buffer overflow in the function ntfs_attr_record_resize, in NTFS-3G < 2021.8.22.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶NVDtuxera/ntfs-3g< 2021.8.22

▶Debiantuxera/ntfs-3g< 1:2017.3.23AR.3-4+deb11u1+3

Also affects: Debian Linux 10.0, 11.0, 9.0, Fedora 33, 35

🔴Vulnerability Details

GHSA

GHSA-j6xg-g9vq-x958: A crafted NTFS image can cause an integer overflow in memmove, leading to a heap-based buffer overflow in the function ntfs_attr_record_resize, in NTF↗2022-05-24

▶

OSV

CVE-2021-39254: A crafted NTFS image can cause an integer overflow in memmove, leading to a heap-based buffer overflow in the function ntfs_attr_record_resize, in NTF↗2021-09-07

▶

CVEList

CVE-2021-39254: A crafted NTFS image can cause an integer overflow in memmove, leading to a heap-based buffer overflow in the function ntfs_attr_record_resize, in NTF↗2021-09-07

▶

📋Vendor Advisories

Microsoft

A crafted NTFS image can cause an integer overflow in memmove leading to a heap-based buffer overflow in the function ntfs_attr_record_resize in NTFS-3G < 2021.8.22.↗2021-09-14

▶

Red Hat

ntfs-3g: Integer overflow in memmove() leading to heap buffer overflow in ntfs_attr_record_resize()↗2021-08-30

▶

Debian

CVE-2021-39254: ntfs-3g - A crafted NTFS image can cause an integer overflow in memmove, leading to a heap...↗2021

▶