CVE-2021-35267

ALTO 7.8CVE-2021-35267 · Published 07/09/2021 · updated 09/07/2026

Em resumo

CVE-2021-35267 é uma vulnerabilidade ALTO (CVSS 7.8) que afeta ntfs-3g (tuxera).
Chance de exploração nos próximos 30 dias (EPSS): 0.49%, maior que 42.0% das vulnerabilidades.
Correção: atualize para 2021.8.22 ou posterior.

Package	Affected versions	Patched versions
ntfs-3g tuxera	`< 2021.8.22`	`2021.8.22`

Description

NTFS-3G versions < 2021.8.22, a stack buffer overflow can occur when correcting differences in the MFT and MFTMirror allowing for code execution or escalation of privileges when setuid-root.

References

openwall.com/lists/oss-security/2021/08/30/1 · Mailing List
tuxera/ntfs-3g security advisory · Third Party Advisory
lists.debian.org/debian-lts-announce/2021/11/msg00013.html · Mailing List
lists.fedoraproject.org/archives/list/[email protected]/message/766ISTT3KCARKFUIQT7N6WV6T63XOKG3
lists.fedoraproject.org/archives/list/[email protected]/message/HSEKTKHO5HFZHWZNJNBJZA56472KRUZI
security.gentoo.org/glsa/202301-01 · Third Party Advisory
debian.org/security/2021/dsa-4971 · Third Party Advisory
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/766ISTT3KCARKFUIQT7N6WV6T63XOKG3
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HSEKTKHO5HFZHWZNJNBJZA56472KRUZI

Mais vulnerabilidades de ntfs-3g

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free