PT-2023-9789 · Ntfs-3G+5 · Ntfs-3G+5
Jeffbencteux
·
Publicado
2023-06-13
·
Atualizado
2026-04-21
·
CVE-2023-52890
CVSS v3.1
4.5
Média
| Vetor | AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
NTFS-3G versions before 75dcdc2
Description
The issue is related to a use-after-free error in the
ntfs uppercase mbs function in libntfs-3g/unistr.c. This could potentially allow an attacker to cause a crash. However, discussions suggest that exploiting this issue would be challenging.Recommendations
For NTFS-3G versions before 75dcdc2, update to a version after 75dcdc2 to resolve the issue. As a temporary workaround, consider restricting access to the
ntfs uppercase mbs function until a patch is available.Correção
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Astra Linux
Linuxmint
Ntfs-3G
Red Os
Suse
Ubuntu