The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5463-2 advisory.

  - An invalid return code in fuse_kern_mount enables intercepting of libfuse-lite protocol traffic between     NTFS-3G and the kernel in NTFS-3G through 2021.8.22 when using libfuse-lite. (CVE-2022-30783)

  - A crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value in NTFS-3G through 2021.8.22.
    (CVE-2022-30784)

  - A file handle created in fuse_lib_opendir, and later used in fuse_lib_readdir, enables arbitrary memory     read and write operations in NTFS-3G through 2021.8.22 when using libfuse-lite. (CVE-2022-30785)

  - A crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate in NTFS-3G through     2021.8.22. (CVE-2022-30786)

  - An integer underflow in fuse_lib_readdir enables arbitrary memory read operations in NTFS-3G through     2021.8.22 when using libfuse-lite. (CVE-2022-30787)

  - A crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc in NTFS-3G through     2021.8.22. (CVE-2022-30788)

  - A crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array in NTFS-3G     through 2021.8.22. (CVE-2022-30789)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Ubuntu 16.04 ESM : NTFS-3G vulnerabilities (USN-5463-2)

high Nessus Plugin ID 163755

Version 1.5

Version 1.4

Version 1.3

Version 1.5 Mar 23, 2023, 8:46 PM Plugin requirements
Version 1.4 Jan 18, 2023, 9:01 AM Logic Changes (Added support for s390x)
Version 1.3 Sep 29, 2022, 12:06 AM CVE (Changed from CVE-2022-30789 to CVE-2022-30786) CVSS metrics