Vulnerability CVE-2022-30787: Information

Description

An integer underflow in fuse_lib_readdir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite.

Severity: MEDIUM (6.7) Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

URL: https://nvd.nist.gov/vuln/detail/CVE-2022-30787

Published: May 26, 2022

Modified: Nov. 7, 2023

Error type identifier: CWE-191

Fixed packages

Package name	Branch	Fixed in version	Version from repository	Errata ID	Task #	State
ntfs-3g	sisyphus	2021.8.22-alt2	2022.10.3-alt1	ALT-PU-2022-3191-1	309667	Fixed
ntfs-3g	sisyphus_e2k	2021.8.22-alt2	2022.10.3-alt1	ALT-PU-2022-7199-1	-	Fixed
ntfs-3g	sisyphus_riscv64	2021.8.22-alt2	2022.10.3-alt1	ALT-PU-2022-7182-1	-	Fixed
ntfs-3g	p10	2021.8.22-alt2	2021.8.22-alt2	ALT-PU-2022-3230-1	310495	Fixed
ntfs-3g	p10_e2k	2021.8.22-alt2	2021.8.22-alt2	ALT-PU-2022-7251-1	-	Fixed
ntfs-3g	p9	2021.8.22-alt2	2021.8.22-alt2	ALT-PU-2023-1655-1	318846	Fixed
ntfs-3g	c10f1	2021.8.22-alt2	2021.8.22-alt2	ALT-PU-2022-3230-1	310495	Fixed
ntfs-3g	c9f2	2021.8.22-alt2	2021.8.22-alt2	ALT-PU-2022-3208-1	310494	Fixed

Hyperlink	Resource
https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-6mv4-4v73-xw58	Third Party Advisory
https://github.com/tuxera/ntfs-3g/releases	Release Notes Third Party Advisory
[oss-security] 20220607 UNPAR-2022-0 Multiple Vulnerabilities in ntfs-3g NTFS Mount Tool	Mailing List Third Party Advisory
DSA-5160	Third Party Advisory
[debian-lts-announce] 20220621 [SECURITY] [DLA 3055-1] ntfs-3g security update	Mailing List Third Party Advisory
GLSA-202301-01	Third Party Advisory
FEDORA-2022-8f775872c9
FEDORA-2022-13bc8c91b0
FEDORA-2022-8fa7e5aeaf
FEDORA-2022-1176b501f0

Version: v24.5.1