CVE-2021-39258 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2021-39258 Interim 1 33 2026-03-05T05:15:08Z current 2021-09-07T00:47:10Z 2026-03-05T05:15:08Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2021-39258 A crafted NTFS image can cause out-of-bounds reads in ntfs_attr_find and ntfs_external_attr_find in NTFS-3G < 2021.8.22. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2021-September/009419.html E-Mail link for SUSE-SU-2021:2965-1 https://lists.suse.com/pipermail/sle-security-updates/2021-September/009416.html E-Mail link for SUSE-SU-2021:2971-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6I22R7EMWP6WBQIXDCKB4KJMMB67TMZK/ E-Mail link for openSUSE-SU-2021:1244-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/APJMFOEFTZSFEAKDMRWUM25JNERJUHUT/ E-Mail link for openSUSE-SU-2021:2971-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings Container suse/sles/15.6/libguestfs-tools:1.1.1.23.352 Container suse/sles/15.7/libguestfs-tools:1.5.0 SUSE Linux Enterprise Workstation Extension 15 SP2 SUSE Linux Enterprise Workstation Extension 15 SP3 SUSE Linux Enterprise Workstation Extension 15 SP4 SUSE Linux Enterprise Workstation Extension 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Development Tools 15 SP7 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Development Tools 15 SP7 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Workstation Extension 12 SP5 SUSE Linux Enterprise Workstation Extension 15 SP2 SUSE Linux Enterprise Workstation Extension 15 SP3 SUSE Linux Enterprise Workstation Extension 15 SP4 SUSE Linux Enterprise Workstation Extension 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Development Tools 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Workstation Extension 12 SP5 SUSE Linux Enterprise Workstation Extension 15 SP2 SUSE Linux Enterprise Workstation Extension 15 SP3 SUSE Linux Enterprise Workstation Extension 15 SP4 SUSE Linux Enterprise Workstation Extension 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Development Tools 15 SP7 openSUSE Leap 15.2 openSUSE Leap 15.3 openSUSE Leap 15.4 openSUSE Tumbleweed libntfs-3g-devel-2021.8.22-1.1 libntfs-3g-devel-2021.8.22-3.8.1 libntfs-3g-devel-2021.8.22-5.9.1 libntfs-3g-devel-2021.8.22-lp152.5.3.1 libntfs-3g-devel-2022.10.3-160000.2.2 libntfs-3g84-2021.8.22-5.9.1 libntfs-3g87-2021.8.22-3.8.1 libntfs-3g87-2021.8.22-lp152.5.3.1 libntfs-3g89-2021.8.22-1.1 libntfs-3g89-2022.10.3-160000.2.2 ntfs-3g-2021.8.22-1.1 ntfs-3g-2021.8.22-3.8.1 ntfs-3g-2021.8.22-5.9.1 ntfs-3g-2021.8.22-lp152.5.3.1 ntfs-3g-2022.10.3-160000.2.2 ntfsprogs-2021.8.22-1.1 ntfsprogs-2021.8.22-3.8.1 ntfsprogs-2021.8.22-5.9.1 ntfsprogs-2021.8.22-lp152.5.3.1 ntfsprogs-2022.10.3-160000.2.2 ntfsprogs-extra-2021.8.22-1.1 ntfsprogs-extra-2021.8.22-3.8.1 ntfsprogs-extra-2021.8.22-lp152.5.3.1 ntfsprogs-extra-2022.10.3-160000.2.2 libntfs-3g87-2021.8.22-3.8.1 as a component of Container suse/sles/15.6/libguestfs-tools:1.1.1.23.352 ntfs-3g-2021.8.22-3.8.1 as a component of Container suse/sles/15.6/libguestfs-tools:1.1.1.23.352 ntfsprogs-2021.8.22-3.8.1 as a component of Container suse/sles/15.6/libguestfs-tools:1.1.1.23.352 libntfs-3g87-2021.8.22-3.8.1 as a component of Container suse/sles/15.7/libguestfs-tools:1.5.0 ntfs-3g-2021.8.22-3.8.1 as a component of Container suse/sles/15.7/libguestfs-tools:1.5.0 ntfsprogs-2021.8.22-3.8.1 as a component of Container suse/sles/15.7/libguestfs-tools:1.5.0 libntfs-3g87-2021.8.22-3.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 ntfs-3g-2021.8.22-3.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 ntfsprogs-2021.8.22-3.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 libntfs-3g87-2021.8.22-3.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 ntfs-3g-2021.8.22-3.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 ntfsprogs-2021.8.22-3.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 libntfs-3g-devel-2021.8.22-3.8.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP6 libntfs-3g-devel-2021.8.22-3.8.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP7 libntfs-3g-devel-2022.10.3-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libntfs-3g89-2022.10.3-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 ntfs-3g-2022.10.3-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 ntfsprogs-2022.10.3-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 ntfsprogs-extra-2022.10.3-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libntfs-3g-devel-2021.8.22-5.9.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libntfs-3g84-2021.8.22-5.9.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libntfs-3g84-2021.8.22-5.9.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 ntfs-3g-2021.8.22-5.9.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 ntfsprogs-2021.8.22-5.9.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 libntfs-3g-devel-2021.8.22-3.8.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP2 libntfs-3g87-2021.8.22-3.8.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP2 ntfs-3g-2021.8.22-3.8.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP2 ntfsprogs-2021.8.22-3.8.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP2 libntfs-3g-devel-2021.8.22-3.8.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP3 libntfs-3g87-2021.8.22-3.8.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP3 ntfs-3g-2021.8.22-3.8.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP3 ntfsprogs-2021.8.22-3.8.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP3 libntfs-3g-devel-2021.8.22-3.8.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP4 libntfs-3g87-2021.8.22-3.8.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP4 ntfs-3g-2021.8.22-3.8.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP4 ntfsprogs-2021.8.22-3.8.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP4 libntfs-3g-devel-2021.8.22-3.8.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP5 libntfs-3g87-2021.8.22-3.8.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP5 ntfs-3g-2021.8.22-3.8.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP5 ntfsprogs-2021.8.22-3.8.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP5 libntfs-3g-devel-2021.8.22-lp152.5.3.1 as a component of openSUSE Leap 15.2 libntfs-3g87-2021.8.22-lp152.5.3.1 as a component of openSUSE Leap 15.2 ntfs-3g-2021.8.22-lp152.5.3.1 as a component of openSUSE Leap 15.2 ntfsprogs-2021.8.22-lp152.5.3.1 as a component of openSUSE Leap 15.2 ntfsprogs-extra-2021.8.22-lp152.5.3.1 as a component of openSUSE Leap 15.2 libntfs-3g-devel-2021.8.22-3.8.1 as a component of openSUSE Leap 15.3 libntfs-3g87-2021.8.22-3.8.1 as a component of openSUSE Leap 15.3 ntfs-3g-2021.8.22-3.8.1 as a component of openSUSE Leap 15.3 ntfsprogs-2021.8.22-3.8.1 as a component of openSUSE Leap 15.3 ntfsprogs-extra-2021.8.22-3.8.1 as a component of openSUSE Leap 15.3 libntfs-3g87-2021.8.22-3.8.1 as a component of openSUSE Leap 15.4 ntfs-3g-2021.8.22-3.8.1 as a component of openSUSE Leap 15.4 ntfsprogs-2021.8.22-3.8.1 as a component of openSUSE Leap 15.4 libntfs-3g-devel-2021.8.22-1.1 as a component of openSUSE Tumbleweed libntfs-3g89-2021.8.22-1.1 as a component of openSUSE Tumbleweed ntfs-3g-2021.8.22-1.1 as a component of openSUSE Tumbleweed ntfsprogs-2021.8.22-1.1 as a component of openSUSE Tumbleweed ntfsprogs-extra-2021.8.22-1.1 as a component of openSUSE Tumbleweed A crafted NTFS image can cause out-of-bounds reads in ntfs_attr_find and ntfs_external_attr_find in NTFS-3G < 2021.8.22. CVE-2021-39258 Container suse/sles/15.6/libguestfs-tools:1.1.1.23.352:libntfs-3g87-2021.8.22-3.8.1 Container suse/sles/15.6/libguestfs-tools:1.1.1.23.352:ntfs-3g-2021.8.22-3.8.1 Container suse/sles/15.6/libguestfs-tools:1.1.1.23.352:ntfsprogs-2021.8.22-3.8.1 Container suse/sles/15.7/libguestfs-tools:1.5.0:libntfs-3g87-2021.8.22-3.8.1 Container suse/sles/15.7/libguestfs-tools:1.5.0:ntfs-3g-2021.8.22-3.8.1 Container suse/sles/15.7/libguestfs-tools:1.5.0:ntfsprogs-2021.8.22-3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:libntfs-3g87-2021.8.22-3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:ntfs-3g-2021.8.22-3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:ntfsprogs-2021.8.22-3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:libntfs-3g87-2021.8.22-3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:ntfs-3g-2021.8.22-3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:ntfsprogs-2021.8.22-3.8.1 SUSE Linux Enterprise Module for Development Tools 15 SP6:libntfs-3g-devel-2021.8.22-3.8.1 SUSE Linux Enterprise Module for Development Tools 15 SP7:libntfs-3g-devel-2021.8.22-3.8.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP4:ntfsprogs-extra-2021.8.22-3.8.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP5:ntfsprogs-extra-2021.8.22-3.8.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP6:ntfsprogs-extra-2021.8.22-3.8.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:ntfsprogs-extra-2021.8.22-3.8.1 SUSE Linux Enterprise Server 16.0:libntfs-3g-devel-2022.10.3-160000.2.2 SUSE Linux Enterprise Server 16.0:libntfs-3g89-2022.10.3-160000.2.2 SUSE Linux Enterprise Server 16.0:ntfs-3g-2022.10.3-160000.2.2 SUSE Linux Enterprise Server 16.0:ntfsprogs-2022.10.3-160000.2.2 SUSE Linux Enterprise Server 16.0:ntfsprogs-extra-2022.10.3-160000.2.2 SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g-devel-2021.8.22-5.9.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g84-2021.8.22-5.9.1 SUSE Linux Enterprise Workstation Extension 12 SP5:libntfs-3g84-2021.8.22-5.9.1 SUSE Linux Enterprise Workstation Extension 12 SP5:ntfs-3g-2021.8.22-5.9.1 SUSE Linux Enterprise Workstation Extension 12 SP5:ntfsprogs-2021.8.22-5.9.1 SUSE Linux Enterprise Workstation Extension 15 SP2:libntfs-3g-devel-2021.8.22-3.8.1 SUSE Linux Enterprise Workstation Extension 15 SP2:libntfs-3g87-2021.8.22-3.8.1 SUSE Linux Enterprise Workstation Extension 15 SP2:ntfs-3g-2021.8.22-3.8.1 SUSE Linux Enterprise Workstation Extension 15 SP2:ntfsprogs-2021.8.22-3.8.1 SUSE Linux Enterprise Workstation Extension 15 SP3:libntfs-3g-devel-2021.8.22-3.8.1 SUSE Linux Enterprise Workstation Extension 15 SP3:libntfs-3g87-2021.8.22-3.8.1 SUSE Linux Enterprise Workstation Extension 15 SP3:ntfs-3g-2021.8.22-3.8.1 SUSE Linux Enterprise Workstation Extension 15 SP3:ntfsprogs-2021.8.22-3.8.1 SUSE Linux Enterprise Workstation Extension 15 SP4:libntfs-3g-devel-2021.8.22-3.8.1 SUSE Linux Enterprise Workstation Extension 15 SP4:libntfs-3g87-2021.8.22-3.8.1 SUSE Linux Enterprise Workstation Extension 15 SP4:ntfs-3g-2021.8.22-3.8.1 SUSE Linux Enterprise Workstation Extension 15 SP4:ntfsprogs-2021.8.22-3.8.1 SUSE Linux Enterprise Workstation Extension 15 SP5:libntfs-3g-devel-2021.8.22-3.8.1 SUSE Linux Enterprise Workstation Extension 15 SP5:libntfs-3g87-2021.8.22-3.8.1 SUSE Linux Enterprise Workstation Extension 15 SP5:ntfs-3g-2021.8.22-3.8.1 SUSE Linux Enterprise Workstation Extension 15 SP5:ntfsprogs-2021.8.22-3.8.1 openSUSE Leap 15.2:libntfs-3g-devel-2021.8.22-lp152.5.3.1 openSUSE Leap 15.2:libntfs-3g87-2021.8.22-lp152.5.3.1 openSUSE Leap 15.2:ntfs-3g-2021.8.22-lp152.5.3.1 openSUSE Leap 15.2:ntfsprogs-2021.8.22-lp152.5.3.1 openSUSE Leap 15.2:ntfsprogs-extra-2021.8.22-lp152.5.3.1 openSUSE Leap 15.3:libntfs-3g-devel-2021.8.22-3.8.1 openSUSE Leap 15.3:libntfs-3g87-2021.8.22-3.8.1 openSUSE Leap 15.3:ntfs-3g-2021.8.22-3.8.1 openSUSE Leap 15.3:ntfsprogs-2021.8.22-3.8.1 openSUSE Leap 15.3:ntfsprogs-extra-2021.8.22-3.8.1 openSUSE Leap 15.4:libntfs-3g87-2021.8.22-3.8.1 openSUSE Leap 15.4:ntfs-3g-2021.8.22-3.8.1 openSUSE Leap 15.4:ntfsprogs-2021.8.22-3.8.1 openSUSE Tumbleweed:libntfs-3g-devel-2021.8.22-1.1 openSUSE Tumbleweed:libntfs-3g89-2021.8.22-1.1 openSUSE Tumbleweed:ntfs-3g-2021.8.22-1.1 openSUSE Tumbleweed:ntfsprogs-2021.8.22-1.1 openSUSE Tumbleweed:ntfsprogs-extra-2021.8.22-1.1 important 6.9 AV:L/AC:M/Au:N/C:C/I:C/A:C 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H