CVE-2022-40284

Se descubrió un desbordamiento del búfer en NTFS-3G antes de 2022.10.3. Los metadatos elaborados en una imagen NTFS pueden provocar la ejecución de código. Un atacante local puede aprovechar esto si el binario ntfs-3g es setuid root. Un atacante físicamente cercano puede aprovechar esto si el software NTFS-3G está configurado para ejecutarse al conectar un dispositivo de almacenamiento externo.

A buffer overflow flaw was found in NTFS-3G. This issue occurs via a crafted metadata in an NTFS image that can cause code execution. A local attacker can exploit this issue if the NTFS-3G binary is setuid root. A physically proximate attacker can exploit this issue if the NTFS-3G software is configured to execute upon attachment of an external storage device.

Also this vulnerability may allow an attacker using a maliciously crafted NTFS-formatted image file or external storage to potentially execute arbitrary privileged code, if the attacker has either local access and the ntfs-3g binary is setuid root, or if the attacker has physical access to an external port to a computer which is configured to run the ntfs-3g binary or one of the ntfsprogs tools when the external storage is plugged into the computer. This vulnerability results from incorrect validation of some of the NTFS metadata that could potentially cause buffer overflow, which could be exploited by an attacker.