Approved changes feed: RSS · Atom

cpe:2.3:a:libfsntfs_project:libfsntfs:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLibfsntfs Project (806da5d4-e1e6-576e-ba7b-81fb201b1a15)
ProductLibfsntfs (41e880ca-e9e1-5abb-aa0f-d4169f4522ce)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libfsntfs purl2cpe 2026-06-01 10:15:54.397165
pkg:deb/ubuntu/libfsntfs purl2cpe 2026-06-01 10:15:54.397168
pkg:github/libyal/libfsntfs purl2cpe 2026-06-01 10:15:54.397171
pkg:nuget/libfsntfs purl2cpe 2026-06-01 10:15:54.397174
pkg:rpm/opensuse/libfsntfs purl2cpe 2026-06-01 10:15:54.397177

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-11731 vulnerable 2026-06-08 05:10:38.870125 Details available
The libfsntfs_mft_entry_read_attributes function in libfsntfs_mft_entry.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on GitHub
Published: 2018-06-19T21:00:00.000Z
Updated: 2024-08-05T08:17:09.082Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11730 vulnerable 2026-06-08 05:10:38.869732 Details available
The libfsntfs_security_descriptor_values_free function in libfsntfs_security_descriptor_values.c in libfsntfs through 2018-04-20 allows remote attackers to cause a denial of service (double-free) via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on GitHub
Published: 2018-06-19T21:00:00.000Z
Updated: 2024-08-05T08:17:08.992Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11729 vulnerable 2026-06-08 05:10:38.869334 Details available
The libfsntfs_mft_entry_read_header function in libfsntfs_mft_entry.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on GitHub
Published: 2018-06-19T21:00:00.000Z
Updated: 2024-08-05T08:17:09.098Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11728 vulnerable 2026-06-08 05:10:38.868820 Details available
The libfsntfs_reparse_point_values_read_data function in libfsntfs_reparse_point_values.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on GitHub
Published: 2018-06-19T21:00:00.000Z
Updated: 2024-08-05T08:17:09.107Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11727 vulnerable 2026-06-08 05:10:38.868051 Details available
The libfsntfs_attribute_read_from_mft function in libfsntfs_attribute.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on GitHub
Published: 2018-06-19T21:00:00.000Z
Updated: 2024-08-05T08:17:09.051Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.