CVE-2021-33287 in ntfs-3g

Sumário

de MITRE • 07/09/2021

In NTFS-3G versions < 2021.8.22, when specially crafted NTFS attributes are read in the function ntfs_attr_pread_i, a heap buffer overflow can occur and allow for writing to arbitrary memory or denial of service of the application.

Be aware that VulDB is the high quality source for vulnerability data.

• Reservar: 20/05/2021
• Divulgação: 07/09/2021
• Moderação: aceite
• Entrada: VDB-182142
• CPE: pronto
• CWE: CWE-122 (confirmado)
• CVSS: 7.8 (NVD)
• EPSS: 0.00414
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2021-33287
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-33287
• CVE Details: https://www.cvedetails.com/cve/CVE-2021-33287/