CVE-2021-39254

概要

参考情報

• tuxera/ntfs-3g release · Release Notes
• tuxera/ntfs-3g security advisory · Third Party Advisory
• lists.debian.org/debian-lts-announce/2021/11/msg00013.html · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/766ISTT3KCARKFUIQT7N6WV6T63XOKG3
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HSEKTKHO5HFZHWZNJNBJZA56472KRUZI
• security.gentoo.org/glsa/202301-01 · Third Party Advisory
• debian.org/security/2021/dsa-4971 · Third Party Advisory

ntfs-3g のその他の脆弱性

• CVE-2026-46570高 8.1In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_index_walk_down() in libntfs-3g/index.c that allows an attacker to corrupt…
• CVE-2026-46572高 7.4In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_cut_tail() in libntfs-3g/index.c that allows an attacker to corrupt hea…
• CVE-2026-46571中 5.5In NTFS-3G before 2026.7.7, a out-of-bounds read exists in ntfs_fix_file_name() in libntfs-3g/reparse.c that allows an attacker to read poss…
• CVE-2026-46569高 7.7In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_copy_tail(), in libntfs-3g/index.c, that allows an attacker to corrupt …
• CVE-2026-42618高 7.1In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_decompress() in compress.c that allows an attacker to corrupt one byte of …