CVE-2021-39251: tuxera ntfs-3g – CVSS 7.8 · Watchpost

← All vulnerabilities

CVE-2021-39251

ALTO 7.8CVE-2021-39251 · Published 07/09/2021 · updated 17/06/2026

Em resumo

CVE-2021-39251 é uma vulnerabilidade ALTO (CVSS 7.8) que afeta ntfs-3g (tuxera).
Chance de exploração nos próximos 30 dias (EPSS): 0.42%, maior que 35.9% das vulnerabilidades.
Correção: atualize para 2021.8.22 ou posterior.

Package	Affected versions	Patched versions
ntfs-3g tuxera	`< 2021.8.22`	`2021.8.22`

Description

A crafted NTFS image can cause a NULL pointer dereference in ntfs_extent_inode_open in NTFS-3G < 2021.8.22.

References

openwall.com/lists/oss-security/2021/08/30/1 · Mailing List
bugs.debian.org/cgi-bin/bugreport.cgi · Issue Tracking
bugzilla.redhat.com/show_bug.cgi · Issue Tracking
tuxera/ntfs-3g release · Release Notes
tuxera/ntfs-3g security advisory · Third Party Advisory
lists.debian.org/debian-lts-announce/2021/11/msg00013.html · Mailing List
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/766ISTT3KCARKFUIQT7N6WV6T63XOKG3
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HSEKTKHO5HFZHWZNJNBJZA56472KRUZI
security.gentoo.org/glsa/202301-01 · Third Party Advisory
debian.org/security/2021/dsa-4971 · Third Party Advisory

Mais vulnerabilidades de ntfs-3g

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free