[Bug 2093326] New: CVE-2022-30786 ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate

List overview All Threads
Download

newer

older

[Bug 2093340] New: CVE-2022-30788...

[Bug 2159621] New: Importing...

bugzilla＠redhat.com

3 Jun 2022 3 Jun '22

8:52 a.m.

https://bugzilla.redhat.com/show_bug.cgi?id=2093326

Bug ID: 2093326 Summary: CVE-2022-30786 ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team@redhat.com Reporter: gsuckevi@redhat.com CC: ddepaula@redhat.com, epel-packagers-sig@lists.fedoraproject.org, jferlan@redhat.com, kparal@redhat.com, ngompa13@gmail.com, rjones@redhat.com, spotrh@gmail.com, virt-maint@redhat.com Target Milestone: --- Classification: Other

A crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate in NTFS-3G through 2021.8.22.

References: https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-xchm-ph5h-hw4x https://github.com/tuxera/ntfs-3g/releases

-- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2093326

Show replies by date

bugzilla＠redhat.com

3 Jun 3 Jun

8:52 a.m.

New subject: [Bug 2093326] CVE-2022-30786 ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate

https://bugzilla.redhat.com/show_bug.cgi?id=2093326

Guilherme de Almeida Suckevicz gsuckevi@redhat.com changed:

Referenced Bugs:

https://bugzilla.redhat.com/show_bug.cgi?id=2093327 [Bug 2093327] CVE-2022-30786 ntfs-3g-system-compression: ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2093328 [Bug 2093328] CVE-2022-30786 ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2093329 [Bug 2093329] CVE-2022-30786 ntfs2btrfs: ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2093330 [Bug 2093330] CVE-2022-30786 ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2093331 [Bug 2093331] CVE-2022-30786 ntfs-3g-system-compression: ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate [fedora-all]

-- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2093326

bugzilla＠redhat.com

8:52 a.m.

New subject: [Bug 2093326] CVE-2022-30786 ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate

https://bugzilla.redhat.com/show_bug.cgi?id=2093326

--- Comment #1 from Guilherme de Almeida Suckevicz gsuckevi@redhat.com --- Created ntfs-3g tracking bugs for this issue:

Affects: epel-all [bug 2093330] Affects: fedora-all [bug 2093328]

Created ntfs-3g-system-compression tracking bugs for this issue:

Affects: epel-all [bug 2093327] Affects: fedora-all [bug 2093331]

Created ntfs2btrfs tracking bugs for this issue:

Affects: fedora-all [bug 2093329]

-- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2093326

bugzilla＠redhat.com

9:10 a.m.

New subject: [Bug 2093326] CVE-2022-30786 ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate

https://bugzilla.redhat.com/show_bug.cgi?id=2093326

Guilherme de Almeida Suckevicz gsuckevi@redhat.com changed:

What |Removed |Added ---------------------------------------------------------------------------- Blocks| |2093356

-- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2093326

bugzilla＠redhat.com

16 Jun 16 Jun

8:13 p.m.

New subject: [Bug 2093326] CVE-2022-30786 ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate

https://bugzilla.redhat.com/show_bug.cgi?id=2093326 Bug 2093326 depends on bug 2093328, which changed state.

Bug 2093328 Summary: CVE-2022-30786 ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2093328

-- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2093326

bugzilla＠redhat.com

17 Jun 17 Jun

7:37 p.m.

New subject: [Bug 2093326] CVE-2022-30786 ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate

https://bugzilla.redhat.com/show_bug.cgi?id=2093326 Bug 2093326 depends on bug 2093331, which changed state.

Bug 2093331 Summary: CVE-2022-30786 ntfs-3g-system-compression: ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2093331

-- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2093326

bugzilla＠redhat.com

17 Aug 17 Aug

8:21 p.m.

New subject: [Bug 2093326] CVE-2022-30786 ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate

https://bugzilla.redhat.com/show_bug.cgi?id=2093326 Bug 2093326 depends on bug 2093330, which changed state.

Bug 2093330 Summary: CVE-2022-30786 ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2093330

-- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2093326

bugzilla＠redhat.com

15 Sep 15 Sep

12:21 p.m.

New subject: [Bug 2093326] CVE-2022-30786 ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate

https://bugzilla.redhat.com/show_bug.cgi?id=2093326

--- Doc Text *updated* by Guilherme de Almeida Suckevicz gsuckevi@redhat.com --- A vulnerability was found in NTFS-3G. Incorrect validation of NTFS metadata can result in a heap-based buffer overflow when processing a crafted NTFS image file or partition.

-- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2093326

bugzilla＠redhat.com

12:39 p.m.

New subject: [Bug 2093326] CVE-2022-30786 ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate

https://bugzilla.redhat.com/show_bug.cgi?id=2093326

Guilherme de Almeida Suckevicz gsuckevi@redhat.com changed:

What |Removed |Added ---------------------------------------------------------------------------- Fixed In Version| |ntfs-3g 2022.5.17

-- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2093326

bugzilla＠redhat.com

2:01 p.m.

New subject: [Bug 2093326] CVE-2022-30786 ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate

https://bugzilla.redhat.com/show_bug.cgi?id=2093326

Guilherme de Almeida Suckevicz gsuckevi@redhat.com changed:

What |Removed |Added ---------------------------------------------------------------------------- Depends On| |2127243, 2127241, 2127246, | |2127242, 2127244, 2127240, | |2127245

-- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2093326

bugzilla＠redhat.com

16 Jan 16 Jan

6:16 p.m.

New subject: [Bug 2093326] CVE-2022-30786 ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate

https://bugzilla.redhat.com/show_bug.cgi?id=2093326 Bug 2093326 depends on bug 2093329, which changed state.

Bug 2093329 Summary: CVE-2022-30786 ntfs2btrfs: ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2093329

-- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2093326

bugzilla＠redhat.com

9 May 9 May

2:15 a.m.

New subject: [Bug 2093326] CVE-2022-30786 ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate

https://bugzilla.redhat.com/show_bug.cgi?id=2093326

--- Comment #3 from errata-xmlrpc errata-xmlrpc@redhat.com --- This issue has been addressed in the following products:

Red Hat Enterprise Linux 9

Via RHSA-2023:2179 https://access.redhat.com/errata/RHSA-2023:2179

-- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2093326

bugzilla＠redhat.com

2:15 a.m.

New subject: [Bug 2093326] CVE-2022-30786 ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate

https://bugzilla.redhat.com/show_bug.cgi?id=2093326

errata-xmlrpc errata-xmlrpc@redhat.com changed:

-- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2093326

bugzilla＠redhat.com

16 May 16 May

3:08 a.m.

New subject: [Bug 2093326] CVE-2022-30786 ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate

https://bugzilla.redhat.com/show_bug.cgi?id=2093326

--- Comment #4 from errata-xmlrpc errata-xmlrpc@redhat.com --- This issue has been addressed in the following products:

Red Hat Enterprise Linux 8

Via RHSA-2023:2757 https://access.redhat.com/errata/RHSA-2023:2757

-- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2093326

bugzilla＠redhat.com

3:08 a.m.

New subject: [Bug 2093326] CVE-2022-30786 ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate

https://bugzilla.redhat.com/show_bug.cgi?id=2093326

errata-xmlrpc errata-xmlrpc@redhat.com changed:

-- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2093326

bugzilla＠redhat.com

8:12 p.m.

New subject: [Bug 2093326] CVE-2022-30786 ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate

https://bugzilla.redhat.com/show_bug.cgi?id=2093326

--- Comment #5 from Product Security DevOps Team prodsec-dev@redhat.com --- This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):

https://access.redhat.com/security/cve/cve-2022-30786

-- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2093326

bugzilla＠redhat.com

8:12 p.m.

New subject: [Bug 2093326] CVE-2022-30786 ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate

https://bugzilla.redhat.com/show_bug.cgi?id=2093326

Product Security DevOps Team prodsec-dev@redhat.com changed:

-- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2093326

762

Age (days ago)

1110

Last active (days ago)

epel-packagers-sig@lists.fedoraproject.org

16 comments

1 participants

tags (0)

participants (1)

bugzilla＠redhat.com