CVE-2021-46790: debian debian_linux Out-of-bounds Write
Vulnerability summary
CVE-2021-46790 is a high (CVSS 7.8) Out-of-bounds Write vulnerability in debian debian_linux. EPSS estimates a 0.50% chance of exploitation in the next 30 days, higher than 43.1% of scored vulnerabilities. 1 public exploit is recorded.
Public exploit (GitHub, Date unknown)
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 9 · Related 4Timeline
- 02-05-2022PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+512*3-2. NOTE: the upstream position is that ntfsck is deprecated; however, it is shipped by some Linux distributions.
CVSS metrics
5 scores · 4 sources · 2 versions- OSV · AlpineEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.50%
Chance of exploitation in the next 30 days
Percentile
43%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.50% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundNtfs 3G
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Debian2 products
- ntfs-3g< 1:2022.5.17-1
- debian_linuxEOL10.0 | 11.0
Alpine1 product
- ntfs-3g< 2022.5.17-r0
Fedoraproject1 product
- fedoraEOL35 | 36
Tuxera1 product
- ntfs-3g≤ 2021.8.22
Ubuntu1 product
- ntfs-3g< 1:2017.3.23-2ubuntu0.18.04.4 | < 1:2017.3.23AR.3-3ubuntu1.2 | < 1:2021.8.22-3ubuntu1.1 | < 1:2013.1.13AR.1-2ubuntu2+esm2 | < 1:2015.3.14AR.1-1ubuntu0.3+esm2
5 vendors · 6 products
