Log in Start free

Vulnerability · Published May 26, 2022 · Assigned by mitre

CVE-2022-30787

Medium 6.7

In plain English

A medium-severity security flaw in the ntfs-3g package (Alpine). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 38% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)6.7Medium
Exploit odds (30 days)0.4%top 62.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

An integer underflow in fuse_lib_readdir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Alpine:v3.20ntfs-3g2022.5.17-r0ALPINE-CVE-2022-30787
Alpine:v3.21ntfs-3g2022.5.17-r0ALPINE-CVE-2022-30787
Alpine:v3.22ntfs-3g2022.5.17-r0ALPINE-CVE-2022-30787
Alpine:v3.23ntfs-3g2022.5.17-r0ALPINE-CVE-2022-30787
Alpine:v3.24ntfs-3g2022.5.17-r0ALPINE-CVE-2022-30787
Debian:12ntfs-3g1:2022.5.17-1DEBIAN-CVE-2022-30787
Debian:13ntfs-3g1:2022.5.17-1DEBIAN-CVE-2022-30787
Debian:14ntfs-3g1:2022.5.17-1DEBIAN-CVE-2022-30787
Ubuntu:22.04:LTSntfs-3g1:2021.8.22-3ubuntu1.1UBUNTU-CVE-2022-30787
Ubuntu:22.04:LTSntfs-3g1:2021.8.22-3ubuntu1.1USN-5463-1

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

References