CVE-2021-46790

HIGH 7.8CVE-2021-46790 · Published 02/05/2022 · updated 17/06/2026

In short

CVE-2021-46790 is a HIGH (CVSS 7.8) vulnerability affecting ntfs-3g (tuxera).
Chance of exploitation in the next 30 days (EPSS): 0.50%, higher than 43.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ntfs-3g tuxera	`≤ 2021.8.22`	No fix yet

Description

ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+512*3-2. NOTE: the upstream position is that ntfsck is deprecated; however, it is shipped by some Linux distributions.

References

openwall.com/lists/oss-security/2022/05/26/1 · Mailing List
tuxera/ntfs-3g · Exploit
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7JPX6OUCQKZX4PN5DQPVDUFZCOOZUX7Z
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ECDCISL24TYH4CTDFCUVF24WAKRSYF7F
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FAXFYIJWT5SHHRNPOJETM77EIMJ6ZP6I
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UEXHDCUSLJD2HSPMAAVZ5AWMPUOG6UI7
debian.org/security/2022/dsa-5160 · Third Party Advisory

More vulnerabilities in ntfs-3g

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free