PT-2023-9789 · Ntfs-3G+5 · Ntfs-3G+5

Jeffbencteux · Published 2023-06-13 · Updated 2026-04-21 · CVE-2023-52890

Positive Technologies (AI Summary)

CVSS v3.1

4.5

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions NTFS-3G versions before 75dcdc2

Description The issue is related to a use-after-free error in the ntfs uppercase mbs function in libntfs-3g/unistr.c. This could potentially allow an attacker to cause a crash. However, discussions suggest that exploiting this issue would be challenging.

Recommendations For NTFS-3G versions before 75dcdc2, update to a version after 75dcdc2 to resolve the issue. As a temporary workaround, consider restricting access to the ntfs uppercase mbs function until a patch is available.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

AZL-42652

AZL-42667

BDU:2024-11076

CVE-2023-52890

MGASA-2024-0284

OESA-2024-1739

OPENSUSE-SU-2024:14046-1

OPENSUSE-SU-2024_2187-1

SUSE-SU-2024:2074-1

SUSE-SU-2024:2187-1

SUSE-SU-2024_2074-1

SUSE-SU-2024_2187-1

USN-8192-1

Affected Products

Astra Linux

Linuxmint

Ntfs-3G

Red Os

Suse

Ubuntu

References · 35

• https://cve.org/CVERecord?id=CVE-2023-52890 · Security Note
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-0114SE18MD · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-52890 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-52890 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2026-0518SE47 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2074-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-11076 · Security Note
• https://osv.dev/vulnerability/AZL-42652 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-42667 · Vendor Advisory
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-52890 · Security Note
• https://osv.dev/vulnerability/USN-8192-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8192-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2024-0284.html · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:14046-1 · Vendor Advisory