CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

filesystems/libfsntfse.20251028

Library and tools to access the New Technology File System (NTFS)

Maintainer
antoine@FreeBSD.org
Packages
libfsntfs e.20251028
Upstream
Higher version available: 20260727
CPE
libfsntfs_project:libfsntfs from the port
WWW
https://github.com/libyal/libfsntfs
Links
cgit · VuXML

Unaddressed (5) · The CVE record lists this version as affected, no VuXML entry names the CVE

CVE-2018-117275.5published 2018-06-19

The libfsntfs_attribute_read_from_mft function in libfsntfs_attribute.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on GitHub

CVE-2018-117285.5published 2018-06-19

The libfsntfs_reparse_point_values_read_data function in libfsntfs_reparse_point_values.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on GitHub

CVE-2018-117295.5published 2018-06-19

The libfsntfs_mft_entry_read_header function in libfsntfs_mft_entry.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on GitHub

CVE-2018-117305.5published 2018-06-19

The libfsntfs_security_descriptor_values_free function in libfsntfs_security_descriptor_values.c in libfsntfs through 2018-04-20 allows remote attackers to cause a denial of service (double-free) via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on GitHub

CVE-2018-117315.5published 2018-06-19

The libfsntfs_mft_entry_read_attributes function in libfsntfs_mft_entry.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on GitHub

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (4)

Antoine Brodin (antoine) · e.20251028
filesystems/libfsntfs: update to experimental-20251028
1ab7cea7a6
Antoine Brodin (antoine) · e.20240501
libyal: fix staging with python 3.12

PR:		285957
be7cb50548
Antoine Brodin (antoine) · e.20240501
filesystems/libfsntfs: update to experimental-20240501
a9bae8b610
Robert Clausecker (fuz) · e.20231125
filesystems: add new category for file systems and related utilities

The filesystems category houses file systems and file system utilities.
It is added mainly to turn the sysutils/fusefs-* pseudo-category into
a proper one, but is also useful for the sundry of other file systems
related ports found in the tree.

Ports that seem like they belong there are moved to the new category.
Two ports, sysutils/fusefs-funionfs and sysutils/fusefs-fusepak are
not moved as they currently don't fetch and don't have TIMESTAMP set
in their distinfo, but that is required to be able to push a rename
of the port by the pre-receive hook.

Approved by:	portmgr (rene)
Reviewed by:	mat
Pull Request:	https://github.com/freebsd/freebsd-ports/pull/302
PR:		281988
6e2da9672f