CVE-2022-30786 — Out-of-bounds Write in Ntfs-3g
Severity
7.8HIGHNVD
EPSS
0.0%
top 93.80%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMay 26
Latest updateAug 2
Description
A crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate in NTFS-3G through 2021.8.22.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9
Affected Packages2 packages
Also affects: Debian Linux 10.0, 11.0, 9.0, Fedora 35, 36
🔴Vulnerability Details
5GHSA▶
GHSA-7wwc-f3r7-9qqw: A crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate in NTFS-3G through 2021↗2022-05-27
CVEList▶
CVE-2022-30786: A crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate in NTFS-3G through 2021↗2022-05-26
OSV▶
CVE-2022-30786: A crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate in NTFS-3G through 2021↗2022-05-26
📋Vendor Advisories
5Red Hat▶
ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate↗2022-05-26
Microsoft▶
A crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate in NTFS-3G through 2021.8.22.↗2022-05-10
Debian▶
CVE-2022-30786: ntfs-3g - A crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_c...↗2022