NTFS-3G before 75dcdc2 has a use-after-free in ntfs_uppercase_mbs in libntfs-3g/unistr.c. NOTE: discussion suggests that exploitation would be challenging.
CVSS Details
- CVSS 3.1 Base Score: 4.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ntfs-3g | Sep 2, 2024 | Jun 13, 2024 |
| Suse | — | Upgrade ntfsprogs-extraUpgrade libntfs-3g87Upgrade libntfs-3g-develUpgrade libntfs-3g84Upgrade ntfs-3gUpgrade ntfsprogs | Jun 19, 2024 | Jun 13, 2024 |
| Ubuntu | — | Upgrade ntfs-3g | Jun 26, 2025 | Jun 13, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub
