Tuesday, September 14, 2021

SUSE: CVE-2021-35266: SUSE Linux Security Advisory

linux vulnerabilities In: linux, vulnerabilities

Description
In Tuxera NTFS-3G versions < 2021.8.22, when a specially crafted NTFS inode pathname is supplied in an NTFS image a heap buffer overflow can occur resulting in memory disclosure, denial of service and even code execution.
Solution(s)
suse-upgrade-libntfs-3g-devel
suse-upgrade-libntfs-3g84
suse-upgrade-libntfs-3g87
suse-upgrade-ntfs-3g
suse-upgrade-ntfsprogs
suse-upgrade-ntfsprogs-extra


ReferencesSUSE-SU-2021:2965-1
SUSE-SU-2021:2971-1
CVE-2021-35266