AZL-9848

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-9848.json

JSON Data

https://api.test.osv.dev/v1/vulns/AZL-9848

Upstream

CVE-2022-30785

Published

2022-05-26T16:15:08Z

Modified

2026-04-01T05:23:45.277486Z

Severity

6.7 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

CVE-2022-30785 affecting package ntfs-3g for versions less than 2022.5.17-1

Details

A file handle created in fuselibopendir, and later used in fuselibreaddir, enables arbitrary memory read and write operations in NTFS-3G through 2021.8.22 when using libfuse-lite.

References

https://nvd.nist.gov/vuln/detail/CVE-2022-30785

Affected packages

Azure Linux:2 / ntfs-3g

Package

Name: ntfs-3g
Purl: pkg:rpm/azure-linux/ntfs-3g

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2022.5.17-1

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-9848.json"