Denial Of Service (DoS)

2022-11-0218:24:39

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

ntfs metadata validation buffer overflow application crash vulnerability

0.0004 Low

EPSS

Percentile

5.1%

JSON

ntfs-3g is vulnerable to denial of service. The vulnerability exists because of a buffer overflow due to incorrect validation of some of the NTFS metadata which allows an attacker to cause an application crash.

CPENameOperatorVersion
ntfs-3g:bioniceq1:2017.3.23-2ubuntu0.18.04.2
ntfs-3g:bioniceq1:2017.3.23-2ubuntu0.18.04.3
ntfs-3g:focaleq1:2017.3.23AR.3-3ubuntu1
ntfs-3g:edgeeq2022.5.17-r0
ntfs-3g:edgeeq2017.3.23-r2
ntfs-3g:edgeeq2017.3.23-r1
ntfs-3g:edgeeq2017.3.23-r3
ntfs-3g:edgeeq2021.8.22-r0
ntfs-3g:sideq1:2017.3.23AR.3-3
ntfs-3g:bookwormeq1:2021.8.22-2

Name	Operator	Version
ntfs-3g:bionic	eq	1:2017.3.23-2ubuntu0.18.04.2
ntfs-3g:bionic	eq	1:2017.3.23-2ubuntu0.18.04.3
ntfs-3g:focal	eq	1:2017.3.23AR.3-3ubuntu1
ntfs-3g:edge	eq	2022.5.17-r0
ntfs-3g:edge	eq	2017.3.23-r2
ntfs-3g:edge	eq	2017.3.23-r1
ntfs-3g:edge	eq	2017.3.23-r3
ntfs-3g:edge	eq	2021.8.22-r0
ntfs-3g:sid	eq	1:2017.3.23AR.3-3
ntfs-3g:bookworm	eq	1:2021.8.22-2