[Bug 2093348] New: CVE-2022-30789 ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array

List overview All Threads
Download

newer

older

[Bug 2093358] New: CVE-2021-46790...

[Bug 2093340] New: CVE-2022-30788...

bugzilla＠redhat.com

3 Jun 2022 3 Jun '22

9:05 a.m.

https://bugzilla.redhat.com/show_bug.cgi?id=2093348

Bug ID: 2093348 Summary: CVE-2022-30789 ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team@redhat.com Reporter: gsuckevi@redhat.com CC: ddepaula@redhat.com, epel-packagers-sig@lists.fedoraproject.org, jferlan@redhat.com, kparal@redhat.com, ngompa13@gmail.com, rjones@redhat.com, spotrh@gmail.com, virt-maint@redhat.com Target Milestone: --- Classification: Other

A crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array in NTFS-3G through 2021.8.22.

References: https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-xchm-ph5h-hw4x https://github.com/tuxera/ntfs-3g/releases

-- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2093348

Show replies by date

bugzilla＠redhat.com

3 Jun 3 Jun

9:06 a.m.

New subject: [Bug 2093348] CVE-2022-30789 ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array

https://bugzilla.redhat.com/show_bug.cgi?id=2093348

Guilherme de Almeida Suckevicz gsuckevi@redhat.com changed:

Referenced Bugs:

https://bugzilla.redhat.com/show_bug.cgi?id=2093349 [Bug 2093349] CVE-2022-30789 ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2093350 [Bug 2093350] CVE-2022-30789 ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2093351 [Bug 2093351] CVE-2022-30789 ntfs2btrfs: ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2093352 [Bug 2093352] CVE-2022-30789 ntfs-3g-system-compression: ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2093353 [Bug 2093353] CVE-2022-30789 ntfs-3g-system-compression: ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array [epel-all]

-- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2093348

bugzilla＠redhat.com

9:06 a.m.

New subject: [Bug 2093348] CVE-2022-30789 ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array

https://bugzilla.redhat.com/show_bug.cgi?id=2093348

--- Comment #1 from Guilherme de Almeida Suckevicz gsuckevi@redhat.com --- Created ntfs-3g tracking bugs for this issue:

Affects: epel-all [bug 2093350] Affects: fedora-all [bug 2093349]

Created ntfs-3g-system-compression tracking bugs for this issue:

Affects: epel-all [bug 2093353] Affects: fedora-all [bug 2093352]

Created ntfs2btrfs tracking bugs for this issue:

Affects: fedora-all [bug 2093351]

-- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2093348

bugzilla＠redhat.com

9:10 a.m.

New subject: [Bug 2093348] CVE-2022-30789 ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array

https://bugzilla.redhat.com/show_bug.cgi?id=2093348

Guilherme de Almeida Suckevicz gsuckevi@redhat.com changed:

What |Removed |Added ---------------------------------------------------------------------------- Blocks| |2093356

-- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2093348

bugzilla＠redhat.com

16 Jun 16 Jun

8:13 p.m.

New subject: [Bug 2093348] CVE-2022-30789 ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array

https://bugzilla.redhat.com/show_bug.cgi?id=2093348 Bug 2093348 depends on bug 2093349, which changed state.

Bug 2093349 Summary: CVE-2022-30789 ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2093349

-- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2093348

bugzilla＠redhat.com

17 Jun 17 Jun

7:37 p.m.

New subject: [Bug 2093348] CVE-2022-30789 ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array

https://bugzilla.redhat.com/show_bug.cgi?id=2093348 Bug 2093348 depends on bug 2093352, which changed state.

Bug 2093352 Summary: CVE-2022-30789 ntfs-3g-system-compression: ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2093352

-- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2093348

bugzilla＠redhat.com

17 Aug 17 Aug

8:21 p.m.

New subject: [Bug 2093348] CVE-2022-30789 ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array

https://bugzilla.redhat.com/show_bug.cgi?id=2093348 Bug 2093348 depends on bug 2093350, which changed state.

Bug 2093350 Summary: CVE-2022-30789 ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2093350

-- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2093348

bugzilla＠redhat.com

15 Sep 15 Sep

12:26 p.m.

New subject: [Bug 2093348] CVE-2022-30789 ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array

https://bugzilla.redhat.com/show_bug.cgi?id=2093348

--- Doc Text *updated* by Guilherme de Almeida Suckevicz gsuckevi@redhat.com --- A vulnerability was found in NTFS-3G. Incorrect validation of NTFS metadata can result in a heap-based buffer overflow when processing a crafted NTFS image file or partition.

-- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2093348

bugzilla＠redhat.com

12:39 p.m.

New subject: [Bug 2093348] CVE-2022-30789 ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array

https://bugzilla.redhat.com/show_bug.cgi?id=2093348

Guilherme de Almeida Suckevicz gsuckevi@redhat.com changed:

What |Removed |Added ---------------------------------------------------------------------------- Fixed In Version| |ntfs-3g 2022.5.17

-- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2093348

bugzilla＠redhat.com

2:03 p.m.

New subject: [Bug 2093348] CVE-2022-30789 ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array

https://bugzilla.redhat.com/show_bug.cgi?id=2093348

Guilherme de Almeida Suckevicz gsuckevi@redhat.com changed:

What |Removed |Added ---------------------------------------------------------------------------- Depends On| |2127259, 2127258, 2127260, | |2127255, 2127261, 2127256, | |2127257

-- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2093348

725

Age (days ago)

829

Last active (days ago)

epel-packagers-sig@lists.stg.fedoraproject.org

9 comments

1 participants

tags (0)

participants (1)

bugzilla＠redhat.com