CVE-2022-30783

An invalid return code in fuse_kern_mount enables intercepting of libfuse-lite protocol traffic between NTFS-3G and the kernel in NTFS-3G through 2021.8.22 when using libfuse-lite.

• CWE-252

• http://www.openwall.com/lists/oss-security/2022/06/07/4Mailing List, Third Party Advisory
• https://github.com/tuxera/ntfs-3g/releasesRelease Notes, Third Party Advisory
• https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-6mv4-4v73-xw58Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/06/msg00017.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7JPX6OUCQKZX4PN5DQPVDUFZCOOZUX7Z/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ECDCISL24TYH4CTDFCUVF24WAKRSYF7F/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FAXFYIJWT5SHHRNPOJETM77EIMJ6ZP6I/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UEXHDCUSLJD2HSPMAAVZ5AWMPUOG6UI7/
• https://security.gentoo.org/glsa/202301-01Third Party Advisory
• https://www.debian.org/security/2022/dsa-5160Third Party Advisory
• http://www.openwall.com/lists/oss-security/2022/06/07/4Mailing List, Third Party Advisory
• https://github.com/tuxera/ntfs-3g/releasesRelease Notes, Third Party Advisory
• https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-6mv4-4v73-xw58Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/06/msg00017.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7JPX6OUCQKZX4PN5DQPVDUFZCOOZUX7Z/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ECDCISL24TYH4CTDFCUVF24WAKRSYF7F/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FAXFYIJWT5SHHRNPOJETM77EIMJ6ZP6I/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UEXHDCUSLJD2HSPMAAVZ5AWMPUOG6UI7/
• https://security.gentoo.org/glsa/202301-01Third Party Advisory
• https://www.debian.org/security/2022/dsa-5160Third Party Advisory

Published

May 26, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-30778Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-30779Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-3078An issue was discovered in the Linux kernel through 5.16-rc6…5.5
• CVE-2022-30780Lighttpd 1.4.56 through 1.4.58 allows a remote attacker to c…7.5
• CVE-2022-30781Gitea before 1.16.7 does not escape git fetch remote.7.5
• CVE-2022-30782Openmoney API through 2020-06-29 uses the JavaScript Math.ra…7.5
• CVE-2022-30784A crafted NTFS image can cause heap exhaustion in ntfs_get_a…7.8
• CVE-2022-30785A file handle created in fuse_lib_opendir, and later used in…6.7
• CVE-2022-30786A crafted NTFS image can cause a heap-based buffer overflow …7.8
• CVE-2022-30787An integer underflow in fuse_lib_readdir enables arbitrary m…6.7
• CVE-2022-30788A crafted NTFS image can cause a heap-based buffer overflow …7.8
• CVE-2022-30789A crafted NTFS image can cause a heap-based buffer overflow …7.8