In NTFS-3G versions < 2021.8.22, when a specially crafted NTFS attribute is supplied to the function ntfsgetattributevalue, a heap buffer overflow can occur allowing for memory disclosure or denial of service. The vulnerability is caused by an out-of-bound buffer access which can be triggered by mounting a crafted ntfs partition. The root cause is a missing consistency check after reading an MFT record : the "bytesinuse" field should be less than the "bytesallocated" field. When it is not, the parsing of the records proceeds into the wild.
{ "ubuntu_priority": "medium", "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "binary_name": "ntfs-3g", "binary_version": "1:2013.1.13AR.1-2ubuntu2+esm1" }, { "binary_name": "ntfs-3g-dbg", "binary_version": "1:2013.1.13AR.1-2ubuntu2+esm1" }, { "binary_name": "ntfs-3g-dbgsym", "binary_version": "1:2013.1.13AR.1-2ubuntu2+esm1" }, { "binary_name": "ntfs-3g-dev", "binary_version": "1:2013.1.13AR.1-2ubuntu2+esm1" }, { "binary_name": "ntfs-3g-dev-dbgsym", "binary_version": "1:2013.1.13AR.1-2ubuntu2+esm1" }, { "binary_name": "ntfs-3g-udeb", "binary_version": "1:2013.1.13AR.1-2ubuntu2+esm1" }, { "binary_name": "ntfs-3g-udeb-dbgsym", "binary_version": "1:2013.1.13AR.1-2ubuntu2+esm1" } ] }
{ "ubuntu_priority": "medium", "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "binary_name": "ntfs-3g", "binary_version": "1:2015.3.14AR.1-1ubuntu0.3+esm1" }, { "binary_name": "ntfs-3g-dbg", "binary_version": "1:2015.3.14AR.1-1ubuntu0.3+esm1" }, { "binary_name": "ntfs-3g-dbgsym", "binary_version": "1:2015.3.14AR.1-1ubuntu0.3+esm1" }, { "binary_name": "ntfs-3g-dev", "binary_version": "1:2015.3.14AR.1-1ubuntu0.3+esm1" }, { "binary_name": "ntfs-3g-dev-dbgsym", "binary_version": "1:2015.3.14AR.1-1ubuntu0.3+esm1" }, { "binary_name": "ntfs-3g-udeb", "binary_version": "1:2015.3.14AR.1-1ubuntu0.3+esm1" }, { "binary_name": "ntfs-3g-udeb-dbgsym", "binary_version": "1:2015.3.14AR.1-1ubuntu0.3+esm1" } ] }
{ "ubuntu_priority": "medium", "availability": "No subscription required", "binaries": [ { "binary_name": "libntfs-3g88", "binary_version": "1:2017.3.23-2ubuntu0.18.04.3" }, { "binary_name": "ntfs-3g", "binary_version": "1:2017.3.23-2ubuntu0.18.04.3" }, { "binary_name": "ntfs-3g-dbg", "binary_version": "1:2017.3.23-2ubuntu0.18.04.3" }, { "binary_name": "ntfs-3g-dev", "binary_version": "1:2017.3.23-2ubuntu0.18.04.3" }, { "binary_name": "ntfs-3g-udeb", "binary_version": "1:2017.3.23-2ubuntu0.18.04.3" } ] }
{ "ubuntu_priority": "medium", "availability": "No subscription required", "binaries": [ { "binary_name": "libntfs-3g883", "binary_version": "1:2017.3.23AR.3-3ubuntu1.1" }, { "binary_name": "libntfs-3g883-dbgsym", "binary_version": "1:2017.3.23AR.3-3ubuntu1.1" }, { "binary_name": "ntfs-3g", "binary_version": "1:2017.3.23AR.3-3ubuntu1.1" }, { "binary_name": "ntfs-3g-dbgsym", "binary_version": "1:2017.3.23AR.3-3ubuntu1.1" }, { "binary_name": "ntfs-3g-dev", "binary_version": "1:2017.3.23AR.3-3ubuntu1.1" }, { "binary_name": "ntfs-3g-dev-dbgsym", "binary_version": "1:2017.3.23AR.3-3ubuntu1.1" }, { "binary_name": "ntfs-3g-udeb", "binary_version": "1:2017.3.23AR.3-3ubuntu1.1" } ] }
{ "ubuntu_priority": "medium", "availability": "No subscription required", "binaries": [ { "binary_name": "libntfs-3g883", "binary_version": "1:2017.3.23AR.3-3ubuntu5" }, { "binary_name": "libntfs-3g883-dbgsym", "binary_version": "1:2017.3.23AR.3-3ubuntu5" }, { "binary_name": "ntfs-3g", "binary_version": "1:2017.3.23AR.3-3ubuntu5" }, { "binary_name": "ntfs-3g-dbgsym", "binary_version": "1:2017.3.23AR.3-3ubuntu5" }, { "binary_name": "ntfs-3g-dev", "binary_version": "1:2017.3.23AR.3-3ubuntu5" }, { "binary_name": "ntfs-3g-dev-dbgsym", "binary_version": "1:2017.3.23AR.3-3ubuntu5" } ] }