01 Record

CVE-2021-33285

In NTFS-3G versions < 2021.8.22, when a specially crafted NTFS attribute is supplied to the function ntfs_get_attribute_value, a heap buffer overflow can occur allowing for memory disclosure or denial

MediumPUBLISHEDCNA: mitre

CNA base score6.7 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.41% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 35.5% of scored records. A rank, not a probability.

NVD base score

7.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2021-09-07 00:00Z5 YR AGO

Last updated

2025-12-03 14:52Z11 MO AGO

Reserved

2021-05-20

Assigning CNA

mitre

Record state

PUBLISHED

Severity

Medium (CVSS 6.7)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-20Improper Input ValidationClass
CWE-787Out-of-bounds WriteBase
CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferClass

Data version

5.2

Document digest

8fe9df4238229f1bc5dc0a234b79ad922837082f3172d0b8df3773842741bfae

05 Affected products

VendorProductVersionsPlatforms

debiandebian_linuxNot specified—

fedoraprojectfedoraNot specified—

redhatadvanced_virtualizationNot specified—

redhatenterprise_linuxNot specified—

tuxerantfs-3gNot specified—

06 References

www.openwall.com[oss-security] 20210830 NTFS3G-SA-2021-0001: Multiple buffer overflows in all versions of NTFS-3Ghttp://www.openwall.com/lists/oss-security/2021/08/30/1mailing-list
github.comhttps://github.com/tuxera/ntfs-3g/security/advisories/GHSA-q759-8j5v-q5jp
www.openwall.comhttps://www.openwall.com/lists/oss-security/2021/08/30/1
bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=2001608
bugs.debian.orghttps://bugs.debian.org/cgi-bin/bugreport.cgi?bug=988386
www.debian.orgDSA-4971https://www.debian.org/security/2021/dsa-4971vendor-advisory
lists.fedoraproject.orgFEDORA-2021-e7c8ba6301https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/766ISTT3KCARKFUIQT7N6WV6T63XOKG3/vendor-advisory
lists.fedoraproject.orgFEDORA-2021-5b1dac797bhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HSEKTKHO5HFZHWZNJNBJZA56472KRUZI/vendor-advisory
lists.debian.org[debian-lts-announce] 20211116 [SECURITY] [DLA 2819-1] ntfs-3g security updatehttps://lists.debian.org/debian-lts-announce/2021/11/msg00013.htmlmailing-list
security.gentoo.orgGLSA-202301-01https://security.gentoo.org/glsa/202301-01vendor-advisory

07 Fixed in

AlmaLinux 8

SLOF
Fixed in 20210217-1.module_el8.6.0+2880+7d9e3703
hivex
Fixed in 1.3.18-23.module_el8.6.0+2880+7d9e3703
hivex-devel
Fixed in 1.3.18-23.module_el8.6.0+2880+7d9e3703
libguestfs
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-appliance
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-bash-completion
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-devel
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-gfs2
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-gobject
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-gobject-devel
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-inspect-icons
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-java
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-java-devel
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-javadoc
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-man-pages-ja
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-man-pages-uk
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-rescue
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-rsync
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-tools
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-tools-c
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-winsupport
Fixed in 8.6-1.module_el8.6.0+2880+7d9e3703
libguestfs-xfs
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libiscsi
Fixed in 1.18.0-8.module_el8.6.0+2880+7d9e3703
libiscsi-devel
Fixed in 1.18.0-8.module_el8.6.0+2880+7d9e3703
libiscsi-utils
Fixed in 1.18.0-8.module_el8.6.0+2880+7d9e3703
libnbd
Fixed in 1.6.0-5.module_el8.6.0+2880+7d9e3703
libnbd-bash-completion
Fixed in 1.6.0-5.module_el8.6.0+2880+7d9e3703
libnbd-devel
Fixed in 1.6.0-5.module_el8.6.0+2880+7d9e3703
libtpms
Fixed in 0.9.1-0.20211126git1ff6fe1f43.module_el8.6.0+2880+7d9e3703
libtpms-devel
Fixed in 0.9.1-0.20211126git1ff6fe1f43.module_el8.6.0+2880+7d9e3703
libvirt
Fixed in 8.0.0-5.module_el8.6.0+2880+7d9e3703
libvirt-client
Fixed in 8.0.0-5.module_el8.6.0+2880+7d9e3703
libvirt-daemon
Fixed in 8.0.0-5.module_el8.6.0+2880+7d9e3703
libvirt-daemon-config-network
Fixed in 8.0.0-5.module_el8.6.0+2880+7d9e3703
libvirt-daemon-config-nwfilter
Fixed in 8.0.0-5.module_el8.6.0+2880+7d9e3703
libvirt-daemon-driver-interface
Fixed in 8.0.0-5.module_el8.6.0+2880+7d9e3703
libvirt-daemon-driver-network
Fixed in 8.0.0-5.module_el8.6.0+2880+7d9e3703
libvirt-daemon-driver-nodedev
Fixed in 8.0.0-5.module_el8.6.0+2880+7d9e3703
libvirt-daemon-driver-nwfilter
Fixed in 8.0.0-5.module_el8.6.0+2880+7d9e3703
libvirt-daemon-driver-qemu
Fixed in 8.0.0-5.module_el8.6.0+2880+7d9e3703

90 further packages in AlmaLinux 8 not shown (first 40 listed).

Arch Linux

ntfs-3g
Fixed in 2021.8.22-1

Source: Arch Linux Security Tracker, the Arch Linux security team. Reformatted by exploit.cc.

CloudLinux 8

SLOF
Fixed in 20210217-1.module_el8.6.0+2880+7d9e3703
hivex
Fixed in 1.3.18-23.module_el8.6.0+2880+7d9e3703
hivex-devel
Fixed in 1.3.18-23.module_el8.6.0+2880+7d9e3703
libguestfs
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-appliance
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-bash-completion
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-devel
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-gfs2
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-gobject
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-gobject-devel
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-inspect-icons
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-java
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-java-devel
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-javadoc
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-man-pages-ja
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-man-pages-uk
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-rescue
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-rsync
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-tools
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-tools-c
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libguestfs-winsupport
Fixed in 8.6-1.module_el8.6.0+2880+7d9e3703
libguestfs-xfs
Fixed in 1:1.44.0-5.module_el8.6.0+2880+7d9e3703.alma
libiscsi
Fixed in 1.18.0-8.module_el8.6.0+2880+7d9e3703
libiscsi-devel
Fixed in 1.18.0-8.module_el8.6.0+2880+7d9e3703
libiscsi-utils
Fixed in 1.18.0-8.module_el8.6.0+2880+7d9e3703
libnbd
Fixed in 1.6.0-5.module_el8.6.0+2880+7d9e3703
libnbd-bash-completion
Fixed in 1.6.0-5.module_el8.6.0+2880+7d9e3703
libnbd-devel
Fixed in 1.6.0-5.module_el8.6.0+2880+7d9e3703
libtpms
Fixed in 0.9.1-0.20211126git1ff6fe1f43.module_el8.6.0+2880+7d9e3703
libtpms-devel
Fixed in 0.9.1-0.20211126git1ff6fe1f43.module_el8.6.0+2880+7d9e3703
libvirt
Fixed in 8.0.0-5.module_el8.6.0+2880+7d9e3703
libvirt-client
Fixed in 8.0.0-5.module_el8.6.0+2880+7d9e3703
libvirt-daemon
Fixed in 8.0.0-5.module_el8.6.0+2880+7d9e3703
libvirt-daemon-config-network
Fixed in 8.0.0-5.module_el8.6.0+2880+7d9e3703
libvirt-daemon-config-nwfilter
Fixed in 8.0.0-5.module_el8.6.0+2880+7d9e3703
libvirt-daemon-driver-interface
Fixed in 8.0.0-5.module_el8.6.0+2880+7d9e3703
libvirt-daemon-driver-network
Fixed in 8.0.0-5.module_el8.6.0+2880+7d9e3703
libvirt-daemon-driver-nodedev
Fixed in 8.0.0-5.module_el8.6.0+2880+7d9e3703
libvirt-daemon-driver-nwfilter
Fixed in 8.0.0-5.module_el8.6.0+2880+7d9e3703
libvirt-daemon-driver-qemu
Fixed in 8.0.0-5.module_el8.6.0+2880+7d9e3703

90 further packages in CloudLinux 8 not shown (first 40 listed).

Derived from AlmaLinux 8. Partial coverage: only packages taken from AlmaLinux 8 are listed.

Debian 12

ntfs-3g
Fixed in 1:2021.8.22-2

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

ntfs-3g
Fixed in 1:2021.8.22-2

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

ntfs-3g
Fixed in 1:2021.8.22-2

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.