CVE-2021-35266
Summary
| CVE | CVE-2021-35266 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2021-09-07 15:15:00 UTC |
|---|
| Updated | 2023-11-07 03:36:00 UTC |
|---|
| Description | In NTFS-3G versions < 2021.8.22, when a specially crafted NTFS inode pathname is supplied in an NTFS image a heap buffer overflow can occur resulting in memory disclosure, denial of service and even code execution. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| [SECURITY] Fedora 35 Update: ntfs-3g-2021.8.22-2.fc35 - package-announce - Fedora Mailing-Lists |
FEDORA |
lists.fedoraproject.org |
|
| Tuxera – Reliable file systems & storage management software - Tuxera |
MISC |
ntfs-3g.com |
|
| Tuxera – Reliable file systems & storage management software - Tuxera |
MISC |
tuxera.com |
|
| OPEN SOURCE NTFS-3G SECURITY ADVISORY NTFS3G-SA-2021-0001 · Advisory · tuxera/ntfs-3g · GitHub |
MISC |
github.com |
|
| [SECURITY] Fedora 33 Update: ntfs-3g-2021.8.22-2.fc33 - package-announce - Fedora Mailing-Lists |
FEDORA |
lists.fedoraproject.org |
|
| oss-security - NTFS3G-SA-2021-0001: Multiple buffer overflows in all versions of
NTFS-3G |
MLIST |
www.openwall.com |
|
| [SECURITY] Fedora 35 Update: ntfs-3g-2021.8.22-2.fc35 - package-announce - Fedora Mailing-Lists |
|
lists.fedoraproject.org |
|
| Debian -- Security Information -- DSA-4971-1 ntfs-3g |
DEBIAN |
www.debian.org |
|
| [SECURITY] Fedora 33 Update: ntfs-3g-2021.8.22-2.fc33 - package-announce - Fedora Mailing-Lists |
|
lists.fedoraproject.org |
|
| [SECURITY] [DLA 2819-1] ntfs-3g security update |
MLIST |
lists.debian.org |
|
| NTFS-3G: Multiple Vulnerabilities (GLSA 202301-01) — Gentoo security |
GENTOO |
security.gentoo.org |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 159858 Oracle Enterprise Linux Security Update for virt:ol and virt-devel:ol (ELSA-2022-1759)
- 178786 Debian Security Update for ntfs-3g (DSA 4971-1)
- 178900 Debian Security Update for ntfs-3g (DLA 2819-1)
- 184072 Debian Security Update for ntfs-3g (CVE-2021-35266)
- 240292 Red Hat Update for virt:rhel and virt-devel:rhel security (RHSA-2022:1759)
- 281928 Fedora Security Update for ntfs (FEDORA-2021-e7c8ba6301)
- 671164 EulerOS Security Update for ntfs-3g (EulerOS-SA-2021-2807)
- 710698 Gentoo Linux NTFS-3G Multiple Vulnerabilities (GLSA 202301-01)
- 751107 SUSE Enterprise Linux Security Update for ntfs-3g_ntfsprogs (SUSE-SU-2021:2965-1)
- 751113 OpenSUSE Security Update for ntfs-3g_ntfsprogs (openSUSE-SU-2021:2971-1)
- 751127 OpenSUSE Security Update for ntfs-3g_ntfsprogs (openSUSE-SU-2021:1244-1)
- 901621 Common Base Linux Mariner (CBL-Mariner) Security Update for ntfs-3g (6752-1)
- 940525 AlmaLinux Security Update for virt:rhel and virt-devel:rhel (ALSA-2022:1759)
- 960314 Rocky Linux Security Update for virt:rhel and virt-devel:rhel (RLSA-2022:1759)
