{
  "fix": "libntfs-3g88 1:2017.3.23-2ubuntu0.18.04.3",
  "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libntfs-3g88-1-2017.3.23-2ubuntu0.18.04.3",
  "summary": "libntfs-3g88 1:2017.3.23-2ubuntu0.18.04.3, released September 7, 2021, fixes 21 CVEs in libntfs-3g88. None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.",
  "platform": "linux",
  "type": "package",
  "title": "libntfs-3g88 1:2017.3.23-2ubuntu0.18.04.3 for Ubuntu 18.04.6 LTS (bionic)",
  "released": "2021-09-07T08:15:00Z",
  "priority": "High",
  "priorityTier": 3,
  "priorityReason": "Closes CVE-2021-35267, high severity",
  "supported": false,
  "cveCount": 21,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.00488,
  "maxCvss": 7.8,
  "appliesTo": [
    {
      "product": "libntfs-3g88",
      "productUrl": "https://patchblox.com/security/product/linux/libntfs-3g88",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:2017.3.23-2ubuntu0.18.04.3",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2021-33289",
      "url": "https://patchblox.com/security/cve/CVE-2021-33289",
      "title": "hivex: ntfs-3g: Heap buffer overflow triggered by a specially crafted MFT section",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00488,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-35266",
      "url": "https://patchblox.com/security/cve/CVE-2021-35266",
      "title": "libguestfs-bash-completion: ntfs-3g: Heap buffer overflow triggered by a specially crafted NTFS inode pathname",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00488,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-35267",
      "url": "https://patchblox.com/security/cve/CVE-2021-35267",
      "title": "libguestfs-bash-completion: ntfs-3g: Stack buffer overflow triggered when correcting differences between MFT and MFTMirror sections",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00488,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-35269",
      "url": "https://patchblox.com/security/cve/CVE-2021-35269",
      "title": "libvirt-daemon-driver-interface: ntfs-3g: Heap buffer overflow in ntfs_attr_setup_flag() triggered by a specially crafted NTFS attribute from MFT",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00477,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-35268",
      "url": "https://patchblox.com/security/cve/CVE-2021-35268",
      "title": "libiscsi-devel: ntfs-3g: Heap buffer overflow in ntfs_inode_real_open() triggered by a specially crafted NTFS inode",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00473,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-33286",
      "url": "https://patchblox.com/security/cve/CVE-2021-33286",
      "title": "libvirt: ntfs-3g: Heap buffer overflow triggered by a specially crafted Unicode string",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00461,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-39256",
      "url": "https://patchblox.com/security/cve/CVE-2021-39256",
      "title": "libvirt-daemon: ntfs-3g: Heap buffer overflow in ntfs_inode_lookup_by_name()",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.00437,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-39254",
      "url": "https://patchblox.com/security/cve/CVE-2021-39254",
      "title": "libguestfs-bash-completion: ntfs-3g: Integer overflow in memmove() leading to heap buffer overflow in ntfs_attr_record_resize()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00436,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-39261",
      "url": "https://patchblox.com/security/cve/CVE-2021-39261",
      "title": "netcf: ntfs-3g: Heap buffer overflow in ntfs_compressed_pwrite()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00434,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-39263",
      "url": "https://patchblox.com/security/cve/CVE-2021-39263",
      "title": "libvirt-daemon-config-nwfilter: ntfs-3g: Heap buffer overflow in ntfs_get_attribute_value() caused by an unsanitized attribute",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.00434,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-39252",
      "url": "https://patchblox.com/security/cve/CVE-2021-39252",
      "title": "libvirt-daemon-driver-storage-rbd: ntfs-3g: Out-of-bounds read in ntfs_ie_lookup()",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.00426,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-39253",
      "url": "https://patchblox.com/security/cve/CVE-2021-39253",
      "title": "libguestfs-tools-c: ntfs-3g: Out-of-bounds read in ntfs_runlists_merge_i()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00423,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-39260",
      "url": "https://patchblox.com/security/cve/CVE-2021-39260",
      "title": "swtpm-libs: ntfs-3g: Out-of-bounds access in ntfs_inode_sync_standard_information()",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.00418,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-39262",
      "url": "https://patchblox.com/security/cve/CVE-2021-39262",
      "title": "libguestfs-bash-completion: ntfs-3g: Out-of-bounds access in ntfs_decompress()",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.00418,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-39251",
      "url": "https://patchblox.com/security/cve/CVE-2021-39251",
      "title": "libvirt-daemon-driver-nwfilter: ntfs-3g: NULL pointer dereference in ntfs_extent_inode_open()",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.00416,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-33285",
      "url": "https://patchblox.com/security/cve/CVE-2021-33285",
      "title": "libvirt-daemon-driver-qemu: ntfs-3g: Out-of-bounds heap buffer access in ntfs_get_attribute_value() due to incorrect check of bytes_in_use value...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00415,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-33287",
      "url": "https://patchblox.com/security/cve/CVE-2021-33287",
      "title": "hivex: ntfs-3g: Heap buffer overflow in ntfs_attr_pread_i() triggered by specially crafted NTFS attributes",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00414,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-39255",
      "url": "https://patchblox.com/security/cve/CVE-2021-39255",
      "title": "libguestfs-inspect-icons: ntfs-3g: Out-of-bounds read ntfs_attr_find_in_attrdef() triggered by an invalid attribute",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.00404,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-39258",
      "url": "https://patchblox.com/security/cve/CVE-2021-39258",
      "title": "libguestfs-tools: ntfs-3g: Out-of-bounds reads in ntfs_attr_find() and ntfs_external_attr_find()",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.00404,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-39259",
      "url": "https://patchblox.com/security/cve/CVE-2021-39259",
      "title": "libguestfs: ntfs-3g: Out-of-bounds access in ntfs_inode_lookup_by_name() caused by an unsanitized attribute length",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.00401,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-39257",
      "url": "https://patchblox.com/security/cve/CVE-2021-39257",
      "title": "libguestfs-tools-c: ntfs-3g: Endless recursion from ntfs_attr_pwrite() triggered by an unallocated bitmap",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-13T14:02:24Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}