[Bug 2093314] New: CVE-2022-30784 ntfs-3g: crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value - Epel-packagers-sig - Fedora Mailing-Lists

2024

2023

2022

2021

[Bug 2093314] New: CVE-2022-30784 ntfs-3g: crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value

[Bug 2159621] New: Importing...

[Bug 2107386] CVE-2022-30632...

bugzilla＠redhat.com

Friday, 3 June 2022 Fri, 3 Jun '22

8:45 a.m.

https://bugzilla.redhat.com/show_bug.cgi?id=2093314 Bug ID: 2093314 Summary: CVE-2022-30784 ntfs-3g: crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: gsuckevi(a)redhat.com CC: ddepaula(a)redhat.com, epel-packagers-sig(a)lists.fedoraproject.org, jferlan(a)redhat.com, kparal(a)redhat.com, ngompa13(a)gmail.com, rjones(a)redhat.com, spotrh(a)gmail.com, virt-maint(a)redhat.com Target Milestone: --- Classification: Other A crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value in NTFS-3G through 2021.8.22. References: https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-xchm-ph5h-hw4x https://github.com/tuxera/ntfs-3g/releases -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2093314

Reply

Show replies by date

bugzilla＠redhat.com

Friday, 3 June Fri, 3 Jun

8:45 a.m.

New subject: [Bug 2093314] CVE-2022-30784 ntfs-3g: crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value

https://bugzilla.redhat.com/show_bug.cgi?id=2093314 Guilherme de Almeida Suckevicz <gsuckevi(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends On| |2093315, 2093319, 2093317, | |2093318, 2093316 Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=2093315 [Bug 2093315] CVE-2022-30784 ntfs-3g-system-compression: ntfs-3g: crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2093316 [Bug 2093316] CVE-2022-30784 ntfs-3g: crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2093317 [Bug 2093317] CVE-2022-30784 ntfs-3g: crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2093318 [Bug 2093318] CVE-2022-30784 ntfs2btrfs: ntfs-3g: crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2093319 [Bug 2093319] CVE-2022-30784 ntfs-3g-system-compression: ntfs-3g: crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value [fedora-all] -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2093314

Reply

bugzilla＠redhat.com

8:45 a.m.

New subject: [Bug 2093314] CVE-2022-30784 ntfs-3g: crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value

https://bugzilla.redhat.com/show_bug.cgi?id=2093314 --- Comment #1 from Guilherme de Almeida Suckevicz <gsuckevi(a)redhat.com> --- Created ntfs-3g tracking bugs for this issue: Affects: epel-all [bug 2093317] Affects: fedora-all [bug 2093316] Created ntfs-3g-system-compression tracking bugs for this issue: Affects: epel-all [bug 2093315] Affects: fedora-all [bug 2093319] Created ntfs2btrfs tracking bugs for this issue: Affects: fedora-all [bug 2093318] -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2093314

Reply

bugzilla＠redhat.com

9:10 a.m.

New subject: [Bug 2093314] CVE-2022-30784 ntfs-3g: crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value

https://bugzilla.redhat.com/show_bug.cgi?id=2093314 Guilherme de Almeida Suckevicz <gsuckevi(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |2093356 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2093314

Reply

bugzilla＠redhat.com

Thursday, 16 June Thu, 16 Jun

8:13 p.m.

New subject: [Bug 2093314] CVE-2022-30784 ntfs-3g: crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value

https://bugzilla.redhat.com/show_bug.cgi?id=2093314 Bug 2093314 depends on bug 2093316, which changed state. Bug 2093316 Summary: CVE-2022-30784 ntfs-3g: crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2093316 What |Removed |Added ---------------------------------------------------------------------------- Status|ON_QA |CLOSED Resolution|--- |ERRATA -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2093314

Reply

bugzilla＠redhat.com

Friday, 17 June Fri, 17 Jun

7:37 p.m.

New subject: [Bug 2093314] CVE-2022-30784 ntfs-3g: crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value

https://bugzilla.redhat.com/show_bug.cgi?id=2093314 Bug 2093314 depends on bug 2093319, which changed state. Bug 2093319 Summary: CVE-2022-30784 ntfs-3g-system-compression: ntfs-3g: crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2093319 What |Removed |Added ---------------------------------------------------------------------------- Status|ON_QA |CLOSED Resolution|--- |ERRATA -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2093314

Reply

bugzilla＠redhat.com

Wednesday, 17 August Wed, 17 Aug

8:20 p.m.

New subject: [Bug 2093314] CVE-2022-30784 ntfs-3g: crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value

https://bugzilla.redhat.com/show_bug.cgi?id=2093314 Bug 2093314 depends on bug 2093317, which changed state. Bug 2093317 Summary: CVE-2022-30784 ntfs-3g: crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2093317 What |Removed |Added ---------------------------------------------------------------------------- Status|ON_QA |CLOSED Resolution|--- |ERRATA -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2093314

Reply

bugzilla＠redhat.com

Thursday, 15 September Thu, 15 Sep

12:04 p.m.

New subject: [Bug 2093314] CVE-2022-30784 ntfs-3g: crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value

https://bugzilla.redhat.com/show_bug.cgi?id=2093314 Guilherme de Almeida Suckevicz <gsuckevi(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Fixed In Version| |ntfs-3g 2022.5.17 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2093314

Reply

bugzilla＠redhat.com

12:17 p.m.

New subject: [Bug 2093314] CVE-2022-30784 ntfs-3g: crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value

https://bugzilla.redhat.com/show_bug.cgi?id=2093314 --- Doc Text *updated* by Guilherme de Almeida Suckevicz <gsuckevi(a)redhat.com> --- A vulnerability was found in NTFS-3G. Incorrect validation of NTFS metadata can result in a heap exhaustion when processing a crafted NTFS image file or partition. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2093314

Reply

bugzilla＠redhat.com

1:59 p.m.

New subject: [Bug 2093314] CVE-2022-30784 ntfs-3g: crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value

https://bugzilla.redhat.com/show_bug.cgi?id=2093314 Guilherme de Almeida Suckevicz <gsuckevi(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends On| |2127239, 2127236, 2127237, | |2127233, 2127235, 2127234, | |2127238 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2093314

Reply

bugzilla＠redhat.com

Monday, 16 January Mon, 16 Jan

6:16 p.m.

New subject: [Bug 2093314] CVE-2022-30784 ntfs-3g: crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value

https://bugzilla.redhat.com/show_bug.cgi?id=2093314 Bug 2093314 depends on bug 2093318, which changed state. Bug 2093318 Summary: CVE-2022-30784 ntfs2btrfs: ntfs-3g: crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2093318 What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution|--- |NOTABUG -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2093314

Reply

bugzilla＠redhat.com

Tuesday, 9 May Tue, 9 May

2:15 a.m.

New subject: [Bug 2093314] CVE-2022-30784 ntfs-3g: crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value

https://bugzilla.redhat.com/show_bug.cgi?id=2093314 --- Comment #3 from errata-xmlrpc <errata-xmlrpc(a)redhat.com> --- This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2023:2179 https://access.redhat.com/errata/RHSA-2023:2179 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2093314

Reply

bugzilla＠redhat.com

2:15 a.m.

New subject: [Bug 2093314] CVE-2022-30784 ntfs-3g: crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value

https://bugzilla.redhat.com/show_bug.cgi?id=2093314 errata-xmlrpc <errata-xmlrpc(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Link ID| |Red Hat Product Errata | |RHSA-2023:2179 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2093314

Reply

bugzilla＠redhat.com

Tuesday, 16 May Tue, 16 May

3:08 a.m.

New subject: [Bug 2093314] CVE-2022-30784 ntfs-3g: crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value

https://bugzilla.redhat.com/show_bug.cgi?id=2093314 --- Comment #4 from errata-xmlrpc <errata-xmlrpc(a)redhat.com> --- This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2023:2757 https://access.redhat.com/errata/RHSA-2023:2757 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2093314

Reply

bugzilla＠redhat.com

3:08 a.m.

New subject: [Bug 2093314] CVE-2022-30784 ntfs-3g: crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value

https://bugzilla.redhat.com/show_bug.cgi?id=2093314 errata-xmlrpc <errata-xmlrpc(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Link ID| |Red Hat Product Errata | |RHSA-2023:2757 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2093314

Reply

bugzilla＠redhat.com

8:11 p.m.

New subject: [Bug 2093314] CVE-2022-30784 ntfs-3g: crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value

https://bugzilla.redhat.com/show_bug.cgi?id=2093314 --- Comment #5 from Product Security DevOps Team <prodsec-dev(a)redhat.com> --- This bug is now closed. Further updates for individual products will be reflected on the CVE page(s): https://access.redhat.com/security/cve/cve-2022-30784 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2093314

Reply

bugzilla＠redhat.com

8:11 p.m.

New subject: [Bug 2093314] CVE-2022-30784 ntfs-3g: crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value

https://bugzilla.redhat.com/show_bug.cgi?id=2093314 Product Security DevOps Team <prodsec-dev(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution|--- |ERRATA Last Closed| |2023-05-17 01:11:23 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2093314

Reply

406

days inactive

754

days old

epel-packagers-sig@lists.fedoraproject.org

Manage subscription

16 comments

1 participants

tags (0)

participants (1)

bugzilla＠redhat.com