Red Hat Security Advisory

RHSA-2023:2179

libguestfs-winsupport security update

Released 2023-05-09 · Red Hat rating Moderate · View on Red Hat →

Fixed in

TI-2022-12918 CVE-2022-30789 · GHSA-m552-m2c9-9wj8

LOW 36

A crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array in NTFS-3G through 2021.8.22.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00447 Published 2022-05-26 Partial fix CWE-20

TI-2022-12917 CVE-2022-30788 · GHSA-cq26-r6qj-8656

LOW 36

A crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc in NTFS-3G through 2021.8.22.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00447 Published 2022-05-26 Partial fix CWE-20

TI-2022-12915 CVE-2022-30786 · GHSA-7wwc-f3r7-9qqw

LOW 36

A crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate in NTFS-3G through 2021.8.22.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00447 Published 2022-05-26 Partial fix CWE-20

TI-2022-12913 CVE-2022-30784 · GHSA-mr29-g89m-5w7h

LOW 36

A crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value in NTFS-3G through 2021.8.22.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00413 Published 2022-05-26 Partial fix CWE-20

TI-2021-21502 CVE-2021-46790 · GHSA-274j-jr8v-77f7

LOW 35

ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+512*3-2.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00504 Published 2022-05-02 Partial fix CWE-787