suse · CVE-2022-30786

Quick triage

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2022-30786 severity moderate: SUSE including 143 source package names (1.1.1.23.352:libntfs-3g87-2022.5.17-150000.3.11.1, 1.1.1.23.352:ntfs-3g-2022.5.17-150000.3.11.1, …), 172 product×package rows across 19 product lines (Container suse/sles/15.6/libguestfs-tools, Container suse/sles/15.7/libguestfs-tools, … (19 product lines)): Fixed 172.

Description:

A crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate in NTFS-3G through 2021.8.22.