CVE-2022-30787: 
CBL Mariner vulnerability analysis and mitigation

CVE-2022-30787 is a security vulnerability discovered in NTFS-3G through version 2021.8.22 when using libfuse-lite. The vulnerability was disclosed in May 2022 and affects the NTFS-3G FUSE driver, which provides read-write NTFS filesystem support for various operating systems (GitHub Advisory, NVD).

The vulnerability is characterized by an integer underflow in the fuse_lib_readdir function that enables arbitrary memory read operations. The vulnerability has been assigned a CVSS v3.1 base score of 6.7 (Medium) with the vector string CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, indicating local access is required but the impact on confidentiality, integrity, and availability is high (NVD).

When exploited, this vulnerability allows an attacker with local access to perform arbitrary memory read operations. If the ntfs-3g binary is setuid root, this could potentially lead to privilege escalation and execution of arbitrary privileged code (GitHub Advisory).

The vulnerability was patched in NTFS-3G version 2022.5.17. Users are strongly recommended to upgrade to this version or later. Multiple Linux distributions have released security updates to address this vulnerability, including Debian (versions 1:2017.3.23AR.3-4+deb11u2), Fedora, and Gentoo (Debian Security, Gentoo Security).