CVE-2022-30783
Fixed in a distro release EPSS <1%
An invalid return code in fuse_kern_mount enables intercepting of libfuse-lite protocol traffic between NTFS-3G and the kernel in NTFS-3G through 2021.8.22 when using libfuse-lite.
Products: tuxera ntfs-3g, fedoraproject fedora, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.16 | ntfs-3g | 2022.5.17-r0 |
| Alpine 3.17 | ntfs-3g | 2022.5.17-r0 |
| Alpine 3.18 | ntfs-3g | 2022.5.17-r0 |
| Alpine 3.19 | ntfs-3g | 2022.5.17-r0 |
| Alpine 3.20 | ntfs-3g | 2022.5.17-r0 |
| Alpine 3.21 | ntfs-3g | 2022.5.17-r0 |
| Alpine 3.22 | ntfs-3g | 2022.5.17-r0 |
| Alpine 3.23 | ntfs-3g | 2022.5.17-r0 |
| Alpine 3.24 | ntfs-3g | 2022.5.17-r0 |
| Amazon Linux 2 | libguestfs-winsupport | 7.2-3.amzn2.0.1 |
| Debian 10 | ntfs-3g | 1:2017.3.23AR.3-3+deb10u2 |
| Debian 11 | ntfs-3g | 1:2017.3.23AR.3-4+deb11u2 |
| Debian 12 | ntfs-3g | 1:2022.5.17-1 |
| Debian 13 | ntfs-3g | 1:2022.5.17-1 |
| Debian 14 | ntfs-3g | 1:2022.5.17-1 |
| Debian 9 | ntfs-3g | 1:2016.2.22AR.1+dfsg-1+deb9u3 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | ntfs-3g_ntfsprogs | 2022.5.17-5.12.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP5 | ntfs-3g_ntfsprogs | 2022.5.17-5.12.1 |
| SUSE Linux Enterprise Workstation Extension 15 SP3 | ntfs-3g_ntfsprogs | 2022.5.17-150000.3.11.1 |
| SUSE Linux Enterprise Workstation Extension 15 SP4 | ntfs-3g_ntfsprogs | 2022.5.17-150000.3.11.1 |
| Ubuntu 18.04 LTS | ntfs-3g | 1:2017.3.23-2ubuntu0.18.04.4 |
| Ubuntu 20.04 LTS | ntfs-3g | 1:2017.3.23AR.3-3ubuntu1.2 |
| Ubuntu 22.04 LTS | ntfs-3g | 1:2021.8.22-3ubuntu1.1 |
| Ubuntu Pro 14.04 LTS | ntfs-3g | 1:2013.1.13AR.1-2ubuntu2+esm3 |
| Ubuntu Pro 16.04 LTS | ntfs-3g | 1:2015.3.14AR.1-1ubuntu0.3+esm3 |
| openSUSE Leap 15.3 | ntfs-3g_ntfsprogs | 2022.5.17-150000.3.11.1 |
| openSUSE Leap 15.4 | ntfs-3g_ntfsprogs | 2022.5.17-150000.3.11.1 |
| openSUSE Tumbleweed | ntfs-3g_ntfsprogs | 2022.5.17-1.1 |