NTFS-3G before 75dcdc2 has a use-after-free in ntfs_uppercase_mbs in libntfs-3g/unistr.c. NOTE: discussion suggests that exploitation would be challenging.
CVSS Details
- CVSS 3.1 Base Score: 4.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ntfs-3g | Sep 2, 2024 | Jun 13, 2024 |
| Suse | — | Upgrade ntfs-3gUpgrade ntfsprogsUpgrade libntfs-3g87Upgrade libntfs-3g-develUpgrade ntfsprogs-extraUpgrade libntfs-3g84 | Jun 19, 2024 | Jun 13, 2024 |
| Ubuntu | — | Upgrade ntfs-3g | Jun 26, 2025 | Jun 13, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub
