CVE-2022-30787: tuxera ntfs-3g – CVSS 6.7 · Watchpost

← All vulnerabilities

CVE-2022-30787

MEDIO 6.7CVE-2022-30787 · Published 26/05/2022 · updated 17/06/2026

En resumen

CVE-2022-30787 es una vulnerabilidad MEDIO (CVSS 6.7) que afecta a ntfs-3g (tuxera).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.43%, mayor que el 37.6% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
ntfs-3g tuxera	`≤ 2021.8.22`	No fix yet

Description

An integer underflow in fuse_lib_readdir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite.

References

openwall.com/lists/oss-security/2022/06/07/4 · Mailing List
tuxera/ntfs-3g release · Release Notes
tuxera/ntfs-3g security advisory · Third Party Advisory
lists.debian.org/debian-lts-announce/2022/06/msg00017.html · Mailing List
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7JPX6OUCQKZX4PN5DQPVDUFZCOOZUX7Z
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ECDCISL24TYH4CTDFCUVF24WAKRSYF7F
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FAXFYIJWT5SHHRNPOJETM77EIMJ6ZP6I
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UEXHDCUSLJD2HSPMAAVZ5AWMPUOG6UI7
security.gentoo.org/glsa/202301-01 · Third Party Advisory
debian.org/security/2022/dsa-5160 · Third Party Advisory

Más vulnerabilidades de ntfs-3g

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free