Note: This is a public test instance of Red Hat Bugzilla. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback at bugzilla.redhat.com.
Bug 2093348 (CVE-2022-30789)
| Summary: | CVE-2022-30789 ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | Guilherme de Almeida Suckevicz <gsuckevi> |
| Component: | vulnerability | Assignee: | Red Hat Product Security <security-response-team> |
| Status: | CLOSED ERRATA | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | unspecified | CC: | ddepaula, epel-packagers-sig, jferlan, kparal, ngompa13, rjones, spotrh, virt-maint |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | ntfs-3g 2022.5.17 | Doc Type: | If docs needed, set a value |
| Doc Text: |
A vulnerability was found in NTFS-3G. Incorrect validation of NTFS metadata can result in a heap-based buffer overflow when processing a crafted NTFS image file or partition.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | 2023-05-17 01:14:19 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 2093353, 2093349, 2093350, 2093351, 2093352, 2127255, 2127256, 2127257, 2127258, 2127259, 2127260, 2127261 | ||
| Bug Blocks: | |||
|
Description
Guilherme de Almeida Suckevicz
2022-06-03 14:05:42 UTC
Created ntfs-3g tracking bugs for this issue: Affects: epel-all [bug 2093350] Affects: fedora-all [bug 2093349] Created ntfs-3g-system-compression tracking bugs for this issue: Affects: epel-all [bug 2093353] Affects: fedora-all [bug 2093352] Created ntfs2btrfs tracking bugs for this issue: Affects: fedora-all [bug 2093351] This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2023:2179 https://access.redhat.com/errata/RHSA-2023:2179 This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2023:2757 https://access.redhat.com/errata/RHSA-2023:2757 This bug is now closed. Further updates for individual products will be reflected on the CVE page(s): https://access.redhat.com/security/cve/cve-2022-30789 |