In NTFS-3G versions < 2021.8.22, when a specially crafted NTFS attribute is supplied to the function ntfsgetattributevalue, a heap buffer overflow can occur allowing for memory disclosure or denial of service. The vulnerability is caused by an out-of-bound buffer access which can be triggered by mounting a crafted ntfs partition. The root cause is a missing consistency check after reading an MFT record : the "bytesinuse" field should be less than the "bytesallocated" field. When it is not, the parsing of the records proceeds into the wild.
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1:2013.1.13AR.1-2ubuntu2+esm1", "binary_name": "ntfs-3g" }, { "binary_version": "1:2013.1.13AR.1-2ubuntu2+esm1", "binary_name": "ntfs-3g-dbg" }, { "binary_version": "1:2013.1.13AR.1-2ubuntu2+esm1", "binary_name": "ntfs-3g-dbgsym" }, { "binary_version": "1:2013.1.13AR.1-2ubuntu2+esm1", "binary_name": "ntfs-3g-dev" }, { "binary_version": "1:2013.1.13AR.1-2ubuntu2+esm1", "binary_name": "ntfs-3g-dev-dbgsym" }, { "binary_version": "1:2013.1.13AR.1-2ubuntu2+esm1", "binary_name": "ntfs-3g-udeb" }, { "binary_version": "1:2013.1.13AR.1-2ubuntu2+esm1", "binary_name": "ntfs-3g-udeb-dbgsym" } ] }
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1:2015.3.14AR.1-1ubuntu0.3+esm1", "binary_name": "ntfs-3g" }, { "binary_version": "1:2015.3.14AR.1-1ubuntu0.3+esm1", "binary_name": "ntfs-3g-dbg" }, { "binary_version": "1:2015.3.14AR.1-1ubuntu0.3+esm1", "binary_name": "ntfs-3g-dbgsym" }, { "binary_version": "1:2015.3.14AR.1-1ubuntu0.3+esm1", "binary_name": "ntfs-3g-dev" }, { "binary_version": "1:2015.3.14AR.1-1ubuntu0.3+esm1", "binary_name": "ntfs-3g-dev-dbgsym" }, { "binary_version": "1:2015.3.14AR.1-1ubuntu0.3+esm1", "binary_name": "ntfs-3g-udeb" }, { "binary_version": "1:2015.3.14AR.1-1ubuntu0.3+esm1", "binary_name": "ntfs-3g-udeb-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1:2017.3.23-2ubuntu0.18.04.3", "binary_name": "libntfs-3g88" }, { "binary_version": "1:2017.3.23-2ubuntu0.18.04.3", "binary_name": "ntfs-3g" }, { "binary_version": "1:2017.3.23-2ubuntu0.18.04.3", "binary_name": "ntfs-3g-dbg" }, { "binary_version": "1:2017.3.23-2ubuntu0.18.04.3", "binary_name": "ntfs-3g-dev" }, { "binary_version": "1:2017.3.23-2ubuntu0.18.04.3", "binary_name": "ntfs-3g-udeb" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1:2017.3.23AR.3-3ubuntu1.1", "binary_name": "libntfs-3g883" }, { "binary_version": "1:2017.3.23AR.3-3ubuntu1.1", "binary_name": "libntfs-3g883-dbgsym" }, { "binary_version": "1:2017.3.23AR.3-3ubuntu1.1", "binary_name": "ntfs-3g" }, { "binary_version": "1:2017.3.23AR.3-3ubuntu1.1", "binary_name": "ntfs-3g-dbgsym" }, { "binary_version": "1:2017.3.23AR.3-3ubuntu1.1", "binary_name": "ntfs-3g-dev" }, { "binary_version": "1:2017.3.23AR.3-3ubuntu1.1", "binary_name": "ntfs-3g-dev-dbgsym" }, { "binary_version": "1:2017.3.23AR.3-3ubuntu1.1", "binary_name": "ntfs-3g-udeb" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1:2017.3.23AR.3-3ubuntu5", "binary_name": "libntfs-3g883" }, { "binary_version": "1:2017.3.23AR.3-3ubuntu5", "binary_name": "libntfs-3g883-dbgsym" }, { "binary_version": "1:2017.3.23AR.3-3ubuntu5", "binary_name": "ntfs-3g" }, { "binary_version": "1:2017.3.23AR.3-3ubuntu5", "binary_name": "ntfs-3g-dbgsym" }, { "binary_version": "1:2017.3.23AR.3-3ubuntu5", "binary_name": "ntfs-3g-dev" }, { "binary_version": "1:2017.3.23AR.3-3ubuntu5", "binary_name": "ntfs-3g-dev-dbgsym" } ] }