{"id":"CVE-2022-30787","aliases":["ALPINE-CVE-2022-30787","AZL-9859","DEBIAN-CVE-2022-30787","DLA-3055-1","DSA-5160-1","EUVD-2022-52610","GHSA-6mv4-4v73-xw58","GHSA-rq5w-qx3v-grh4","MGASA-2022-0385","OESA-2022-1685","SUSE-SU-2022:2835-1","SUSE-SU-2022:2836-1","UBUNTU-CVE-2022-30787","USN-5463-1","USN-5463-2"],"status":"published","title":"An integer underflow in fuse_lib_readdir enables arbitrary memory read operations in NTFS-3G...","description":"An integer underflow in fuse_lib_readdir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite.","severity":{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00433,"percentile":0.37816,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-191"],"published":"2022-05-26T00:00:00Z","modified":"2026-11-03T07:18:33Z","fixes":[{"ecosystem":"Alpine:v3.16","package":"ntfs-3g","fixed_in":["2022.5.17-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"ntfs-3g","fixed_in":["2022.5.17-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"ntfs-3g","fixed_in":["2022.5.17-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"ntfs-3g","fixed_in":["2022.5.17-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"ntfs-3g","fixed_in":["2022.5.17-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"ntfs-3g","fixed_in":["2022.5.17-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"ntfs-3g","fixed_in":["2022.5.17-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"ntfs-3g","fixed_in":["2022.5.17-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"ntfs-3g","fixed_in":["2022.5.17-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"ntfs-3g","fixed_in":["2022.5.17-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"ntfs-3g","fixed_in":["1:2022.5.17-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"ntfs-3g","fixed_in":["1:2022.5.17-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"ntfs-3g","fixed_in":["1:2022.5.17-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"ntfs-3g","fixed_in":["1:2013.1.13AR.1-2ubuntu2+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ntfs-3g","fixed_in":["1:2015.3.14AR.1-1ubuntu0.3+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"ntfs-3g","fixed_in":["1:2017.3.23-2ubuntu0.18.04.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"ntfs-3g","fixed_in":["1:2017.3.23AR.3-3ubuntu1.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"ntfs-3g","fixed_in":["1:2021.8.22-3ubuntu1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.16","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.5.17-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.5.17-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.5.17-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.5.17-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.5.17-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.5.17-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.5.17-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.5.17-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.5.17-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.5.17-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2022.5.17-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2022.5.17-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2022.5.17-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2016.2.22AR.1+dfsg-1+deb9u3"}]}],"versions":["1:2016.2.22AR.1+dfsg-1","1:2016.2.22AR.1+dfsg-1+deb9u1","1:2016.2.22AR.1+dfsg-1+deb9u2"],"bundled":8},{"source":"osv","ecosystem":"Debian:10","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2017.3.23AR.3-3+deb10u2"}]}],"versions":["1:2017.3.23AR.3-3","1:2017.3.23AR.3-3+deb10u1"],"bundled":8},{"source":"osv","ecosystem":"Debian:11","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2017.3.23AR.3-4+deb11u2"}]}],"versions":["1:2017.3.23AR.3-4","1:2017.3.23AR.3-4+deb11u1"],"bundled":8},{"source":"osv","ecosystem":"Mageia:8","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.8.22-1.1.mga8"}]}],"bundled":8},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.5.17-1.oe1"}]}],"bundled":8},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.5.17-1.oe1"}]}],"bundled":8},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.5.17-1.oe2203"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP3","package":"ntfs-3g_ntfsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.5.17-150000.3.11.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP4","package":"ntfs-3g_ntfsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.5.17-150000.3.11.1"}]}],"bundled":8},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"ntfs-3g_ntfsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.5.17-150000.3.11.1"}]}],"bundled":8},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"ntfs-3g_ntfsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.5.17-150000.3.11.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"ntfs-3g_ntfsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.5.17-5.12.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"ntfs-3g_ntfsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.5.17-5.12.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2013.1.13AR.1-2ubuntu2+esm3"}]}],"versions":["1:2013.1.13AR.1-2ubuntu1","1:2013.1.13AR.1-2ubuntu2","1:2013.1.13AR.1-2ubuntu2+esm1","1:2013.1.13AR.1-2ubuntu2+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2015.3.14AR.1-1ubuntu0.3+esm3"}]}],"versions":["1:2014.2.15AR.3-3","1:2015.3.14AR.1-1","1:2015.3.14AR.1-1build1","1:2015.3.14AR.1-1ubuntu0.1","1:2015.3.14AR.1-1ubuntu0.2","1:2015.3.14AR.1-1ubuntu0.3","1:2015.3.14AR.1-1ubuntu0.3+esm1","1:2015.3.14AR.1-1ubuntu0.3+esm2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2017.3.23-2ubuntu0.18.04.4"}]}],"versions":["1:2016.2.22AR.2-2","1:2017.3.23-2","1:2017.3.23-2ubuntu0.18.04.1","1:2017.3.23-2ubuntu0.18.04.2","1:2017.3.23-2ubuntu0.18.04.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2017.3.23AR.3-3ubuntu1.2"}]}],"versions":["1:2017.3.23AR.3-3ubuntu1","1:2017.3.23AR.3-3ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2021.8.22-3ubuntu1.1"}]}],"versions":["1:2017.3.23AR.3-3ubuntu5","1:2017.3.23AR.3-3ubuntu6","1:2021.8.22-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2017.3.23-2ubuntu0.18.04.4"}]}],"versions":["1:2016.2.22AR.2-2","1:2017.3.23-2","1:2017.3.23-2ubuntu0.18.04.1","1:2017.3.23-2ubuntu0.18.04.2","1:2017.3.23-2ubuntu0.18.04.3"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2017.3.23AR.3-3ubuntu1.2"}]}],"versions":["1:2017.3.23AR.3-3ubuntu1","1:2017.3.23AR.3-3ubuntu1.1"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2021.8.22-3ubuntu1.1"}]}],"versions":["1:2017.3.23AR.3-3ubuntu5","1:2017.3.23AR.3-3ubuntu6","1:2021.8.22-3ubuntu1"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2013.1.13AR.1-2ubuntu2+esm3"}]}],"versions":["1:2013.1.13AR.1-2ubuntu1","1:2013.1.13AR.1-2ubuntu2","1:2013.1.13AR.1-2ubuntu2+esm1","1:2013.1.13AR.1-2ubuntu2+esm2"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2015.3.14AR.1-1ubuntu0.3+esm3"}]}],"versions":["1:2014.2.15AR.3-3","1:2015.3.14AR.1-1","1:2015.3.14AR.1-1build1","1:2015.3.14AR.1-1ubuntu0.1","1:2015.3.14AR.1-1ubuntu0.2","1:2015.3.14AR.1-1ubuntu0.3","1:2015.3.14AR.1-1ubuntu0.3+esm1","1:2015.3.14AR.1-1ubuntu0.3+esm2"],"bundled":7}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"tuxera","product":"ntfs-3g"}],"references":[{"url":"https://github.com/tuxera/ntfs-3g/releases","tags":["x_transferred","Release Notes","Third Party Advisory","package","report"]},{"url":"https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-6mv4-4v73-xw58","tags":["x_transferred","Third Party Advisory","advisory","report"]},{"url":"http://www.openwall.com/lists/oss-security/2022/06/07/4","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article"]},{"url":"https://www.debian.org/security/2022/dsa-5160","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7JPX6OUCQKZX4PN5DQPVDUFZCOOZUX7Z/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ECDCISL24TYH4CTDFCUVF24WAKRSYF7F/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/06/msg00017.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FAXFYIJWT5SHHRNPOJETM77EIMJ6ZP6I/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UEXHDCUSLJD2HSPMAAVZ5AWMPUOG6UI7/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://security.gentoo.org/glsa/202301-01","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30787","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7JPX6OUCQKZX4PN5DQPVDUFZCOOZUX7Z/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ECDCISL24TYH4CTDFCUVF24WAKRSYF7F/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FAXFYIJWT5SHHRNPOJETM77EIMJ6ZP6I/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UEXHDCUSLJD2HSPMAAVZ5AWMPUOG6UI7/"},{"url":"https://github.com/advisories/GHSA-rq5w-qx3v-grh4"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-30787","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/30xxx/CVE-2022-30783.json","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30783","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/30xxx/CVE-2022-30785.json","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30785","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/30xxx/CVE-2022-30787.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-30787","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0385.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30479","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2022/05/26/1","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2022/05/26/2","tags":["web","report"]},{"url":"https://ubuntu.com/security/notices/USN-5452-1","tags":["advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2022/06/07/4","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-5463-1","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/7JPX6OUCQKZX4PN5DQPVDUFZCOOZUX7Z/","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CUCIRAD67WWT3IZWCVN25JFFBTDANX5J/","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1685","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-46790","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30784","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30786","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30788","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30789","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222835-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1199978","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-46790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30784","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30787","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30788","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30789","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222836-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-30787","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5463-2","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-30787","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-46790","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-30783","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-30784","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-30785","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-30786","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-30788","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-30789","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2022-30787","description":"An integer underflow in fuse_lib_readdir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite.","status":"published","published":"2022-05-26T00:00:00Z","modified":"2024-08-03T07:03:38.621Z","updated_at":"2026-11-02T14:34:31.184134Z"}],"euvd":[{"id":"EUVD-2022-52610","description":"An integer underflow in fuse_lib_readdir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite.","status":"published","published":"2022-05-26T00:00:00Z","modified":"2024-08-03T07:03:38Z","updated_at":"2026-11-03T03:25:35.220299Z"}],"ghsa":[{"id":"GHSA-rq5w-qx3v-grh4","title":"An integer underflow in fuse_lib_readdir enables arbitrary memory read operations in NTFS-3G...","description":"An integer underflow in fuse_lib_readdir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite.","status":"published","published":"2022-05-27T00:00:48Z","modified":"2023-01-27T05:04:03Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"cwes":["CWE-191"],"updated_at":"2026-11-02T14:42:22.530177Z"}],"nvd":[{"id":"CVE-2022-30787","description":"An integer underflow in fuse_lib_readdir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite.","status":"published","published":"2022-05-26T16:15:09.033Z","modified":"2026-06-17T04:44:17.967Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-191"],"updated_at":"2026-11-02T14:07:21.261605Z"}],"osv":[{"id":"ALPINE-CVE-2022-30787","description":"An integer underflow in fuse_lib_readdir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite.","status":"published","published":"2022-05-26T16:15:09.033Z","modified":"2026-11-03T07:18:33.413313849Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-03T07:51:12.284675Z"},{"id":"AZL-9859","title":"CVE-2022-30787 affecting package ntfs-3g for versions less than 2022.5.17-1","description":"An integer underflow in fuse_lib_readdir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite.","status":"published","published":"2022-05-26T16:15:09Z","modified":"2026-04-21T04:35:10.40003Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:12.596039Z"},{"id":"OESA-2022-1685","title":"ntfs-3g security update","description":"NTFS-3G is a stable, open source, GPL licensed, POSIX, read/write NTFS driver for Linux and many other operating systems. It provides safe handling of the Windows XP, Windows Server 2003, Windows 2000, Windows Vista, Windows Server 2008 and Windows 7 NTFS file systems.\n\nSecurity Fix(es):\n\nntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+512*3-2. NOTE: the upstream position is that ntfsck is deprecated; however, it is shipped by some Linux distributions.(CVE-2021-46790)\n\nAn invalid return code in fuse_kern_mount enables intercepting of libfuse-lite protocol traffic between NTFS-3G and the kernel in NTFS-3G through 2021.8.22 when using libfuse-lite.(CVE-2022-30783)\n\nA file handle created in fuse_lib_opendir, and later used in fuse_lib_readdir, enables arbitrary memory read and write operations in NTFS-3G through 2021.8.22 when using libfuse-lite.(CVE-2022-30785)\n\nAn integer underflow in fuse_lib_readdir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite.(CVE-2022-30787)\n\nA crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value in NTFS-3G through 2021.8.22.(CVE-2022-30784)\n\nA crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate in NTFS-3G through 2021.8.22.(CVE-2022-30786)\n\nA crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc in NTFS-3G through 2021.8.22.(CVE-2022-30788)\n\nA crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array in NTFS-3G through 2021.8.22.(CVE-2022-30789)","status":"published","published":"2022-06-02T11:04:57Z","modified":"2026-08-18T01:16:39.449766814Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"UBUNTU-CVE-2022-30787","description":"An integer underflow in fuse_lib_readdir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite.","status":"published","published":"2022-05-26T16:15:00Z","modified":"2026-04-22T13:22:14.197394Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T16:53:53.899276Z"},{"id":"CVE-2022-30783","description":"An invalid return code in fuse_kern_mount enables intercepting of libfuse-lite protocol traffic between NTFS-3G and the kernel in NTFS-3G through 2021.8.22 when using libfuse-lite.","status":"published","published":"2022-05-26T00:00:00Z","modified":"2026-10-28T02:31:05.340440379Z","updated_at":"2026-11-02T15:44:25.516981Z"},{"id":"CVE-2022-30785","description":"A file handle created in fuse_lib_opendir, and later used in fuse_lib_readdir, enables arbitrary memory read and write operations in NTFS-3G through 2021.8.22 when using libfuse-lite.","status":"published","published":"2022-05-26T00:00:00Z","modified":"2026-10-28T02:30:22.23657168Z","updated_at":"2026-11-02T15:44:25.516981Z"},{"id":"CVE-2022-30787","description":"An integer underflow in fuse_lib_readdir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite.","status":"published","published":"2022-05-26T00:00:00Z","modified":"2026-10-28T02:30:59.850209706Z","updated_at":"2026-11-02T15:44:25.516981Z"},{"id":"DEBIAN-CVE-2022-30787","description":"An integer underflow in fuse_lib_readdir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite.","status":"published","published":"2022-05-26T16:15:09.033Z","modified":"2026-11-03T06:02:31.543135704Z","updated_at":"2026-11-03T06:44:05.456691Z"},{"id":"DLA-3055-1","title":"ntfs-3g - security update","status":"published","published":"2022-06-21T00:00:00Z","modified":"2026-03-09T01:00:58.7958Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DSA-5160-1","title":"ntfs-3g - security update","status":"published","published":"2022-06-10T00:00:00Z","modified":"2026-03-09T02:11:24.204442Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"MGASA-2022-0385","title":"Updated ntfs-3g packages fix security vulnerability","description":"ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow\ninvolving buffer+512*3-2. (CVE-2021-46790)\n\nAn invalid return code in fuse_kern_mount enables intercepting of\nlibfuse-lite protocol traffic between NTFS-3G and the kernel in NTFS-3G\nthrough 2021.8.22 when using libfuse-lite. (CVE-2022-30783)\n\nA crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value\nin NTFS-3G through 2021.8.22. (CVE-2022-30784)\n\nA file handle created in fuse_lib_opendir, and later used in\nfuse_lib_readdir, enables arbitrary memory read and write operations in\nNTFS-3G through 2021.8.22 when using libfuse-lite. (CVE-2022-30785)\n\nA crafted NTFS image can cause a heap-based buffer overflow in\nntfs_names_full_collate in NTFS-3G through 2021.8.22. (CVE-2022-30786)\n\nAn integer underflow in fuse_lib_readdir enables arbitrary memory read\noperations in NTFS-3G through 2021.8.22 when using libfuse-lite.\n(CVE-2022-30787)\n\nA crafted NTFS image can cause a heap-based buffer overflow in\nntfs_mft_rec_alloc in NTFS-3G through 2021.8.22. (CVE-2022-30788)\n\nA crafted NTFS image can cause a heap-based buffer overflow\nin ntfs_check_log_client_array in NTFS-3G through 2021.8.22.\n(CVE-2022-30789)\n","status":"published","published":"2022-10-23T22:48:35Z","modified":"2026-04-16T04:41:24.43648306Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"SUSE-SU-2022:2835-1","title":"Security update for ntfs-3g_ntfsprogs","description":"This update for ntfs-3g_ntfsprogs fixes the following issues:\n\nUpdated to version 2022.5.17 (bsc#1199978):\n- CVE-2022-30783: Fixed an issue where messages between NTFS-3G and\n  the kernel could be intercepted when using libfuse-lite.\n- CVE-2022-30784: Fixed a memory exhaustion issue when opening a\n  crafted NTFS image.\n- CVE-2022-30785: Fixed a bug where arbitrary memory read and write\n  operations could be achieved whe using libfuse-lite.\n- CVE-2022-30786: Fixed a memory corruption issue when opening a\n  crafted NTFS image.\n- CVE-2022-30787: Fixed an integer underflow which enabled arbitrary\n  memory read operations when using libfuse-lite.\n- CVE-2022-30788: Fixed a memory corruption issue when opening a\n  crafted NTFS image.\n- CVE-2022-30789: Fixed a memory corruption issue when opening a\n  crafted NTFS image.\n","status":"published","published":"2022-08-17T14:52:41Z","modified":"2025-05-02T04:32:02.446747Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2022:2836-1","title":"Security update for ntfs-3g_ntfsprogs","description":"This update for ntfs-3g_ntfsprogs fixes the following issues:\n\nUpdated to version 2022.5.17 (bsc#1199978):\n- CVE-2022-30783: Fixed an issue where messages between NTFS-3G and\n  the kernel could be intercepted when using libfuse-lite.\n- CVE-2022-30784: Fixed a memory exhaustion issue when opening a\n  crafted NTFS image.\n- CVE-2022-30785: Fixed a bug where arbitrary memory read and write\n  operations could be achieved when using libfuse-lite.\n- CVE-2022-30786: Fixed a memory corruption issue when opening a\n  crafted NTFS image.\n- CVE-2022-30787: Fixed an integer underflow which enabled arbitrary\n  memory read operations when using libfuse-lite.\n- CVE-2022-30788: Fixed a memory corruption issue when opening a\n  crafted NTFS image.\n- CVE-2022-30789: Fixed a memory corruption issue when opening a\n  crafted NTFS image.\n","status":"published","published":"2022-08-17T14:52:59Z","modified":"2026-02-04T04:26:25.018218Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"USN-5463-1","title":"ntfs-3g vulnerabilities","description":"It was discovered that NTFS-3G incorrectly handled the ntfsck tool. If a\nuser or automated system were tricked into using ntfsck on a specially\ncrafted disk image, a remote attacker could possibly use this issue to\nexecute arbitrary code. (CVE-2021-46790)\n\nRoman Fiedler discovered that NTFS-3G incorrectly handled certain return\ncodes. A local attacker could possibly use this issue to intercept\nprotocol traffic between FUSE and the kernel. (CVE-2022-30783)\n\nIt was discovered that NTFS-3G incorrectly handled certain NTFS disk\nimages. If a user or automated system were tricked into mounting a\nspecially crafted disk image, a remote attacker could use this issue to\ncause a denial of service, or possibly execute arbitrary code.\n(CVE-2022-30784, CVE-2022-30786, CVE-2022-30788, CVE-2022-30789)\n\nRoman Fiedler discovered that NTFS-3G incorrectly handled certain file\nhandles. A local attacker could possibly use this issue to read and write\narbitrary memory. (CVE-2022-30785, CVE-2022-30787)\n","status":"published","published":"2022-06-07T14:15:00Z","modified":"2026-04-22T10:24:48.501498Z","updated_at":"2026-11-02T16:58:16.20937Z"},{"id":"USN-5463-2","title":"ntfs-3g vulnerabilities","description":"USN-5463-1 fixed vulnerabilities in NTFS-3G. This update provides the\ncorresponding updates for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.\n\nOriginal advisory details:\n\n Roman Fiedler discovered that NTFS-3G incorrectly handled certain return\n codes. A local attacker could possibly use this issue to intercept\n protocol traffic between FUSE and the kernel. (CVE-2022-30783)\n \n It was discovered that NTFS-3G incorrectly handled certain NTFS disk\n images. If a user or automated system were tricked into mounting a\n specially crafted disk image, a remote attacker could use this issue to\n cause a denial of service, or possibly execute arbitrary code.\n (CVE-2022-30784, CVE-2022-30786, CVE-2022-30788, CVE-2022-30789)\n \n Roman Fiedler discovered that NTFS-3G incorrectly handled certain file\n handles. A local attacker could possibly use this issue to read and write\n arbitrary memory. (CVE-2022-30785, CVE-2022-30787)\n","status":"published","published":"2022-08-02T14:28:01Z","modified":"2026-06-29T13:49:38.851459252Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}