PatchTheCVElibfsntfs vulnerabilities and fixes
Recent CVEs affecting libfsntfs, with upgrade or downgrade steps. 5 tracked.
libfsntfs has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2018-06-19. Highest priority: CVE-2018-11731 (score 36/100).
- CVE-2018-11731 MEDIUM 5.5 UPGRADE The libfsntfs_mft_entry_read_attributes function in libfsntfs_mft_entry.c in libfsntfs through 2018-04-20 allo
- CVE-2018-11730 MEDIUM 5.5 UPGRADE The libfsntfs_security_descriptor_values_free function in libfsntfs_security_descriptor_values.c in libfsntfs
- CVE-2018-11729 MEDIUM 5.5 UPGRADE The libfsntfs_mft_entry_read_header function in libfsntfs_mft_entry.c in libfsntfs through 2018-04-20 allows r
- CVE-2018-11728 MEDIUM 5.5 UPGRADE The libfsntfs_reparse_point_values_read_data function in libfsntfs_reparse_point_values.c in libfsntfs through
- CVE-2018-11727 MEDIUM 5.5 UPGRADE The libfsntfs_attribute_read_from_mft function in libfsntfs_attribute.c in libfsntfs through 2018-04-20 allows
FAQ
How do I fix libfsntfs vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is libfsntfs being exploited right now?
None of the tracked libfsntfs CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which libfsntfs CVE should I patch first?
CVE-2018-11731 currently ranks highest (36/100): The libfsntfs_mft_entry_read_attributes function in libfsntfs_mft_entry.c in libfsntfs through 2018-04-20 allo.