Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1109003

Bug#1014538: fuse-exfat: CVE-2022-29973

Show all headers | View raw

Source: fuse-exfat
X-Debbugs-CC: team@security.debian.org
Severity: important
Tags: security

Hi,

The following vulnerability was published for fuse-exfat.

CVE-2022-29973[0]:
| relan exFAT 1.3.0 allows local users to obtain sensitive information
| (data from deleted files in the filesystem) in certain situations
| involving offsets beyond ValidDataLength.

https://github.com/relan/exfat/issues/185

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2022-29973
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29973

Please adjust the affected versions in the BTS as needed.

Back to linux.debian.bugs.dist | Previous | Next | Find similar | Unroll thread

Thread

Bug#1014538: fuse-exfat: CVE-2022-29973 Moritz Mühlenhoff <jmm@inutil.org> - 2022-07-07 18:00 +0200

csiph-web