CVE-2018-11730 describes a double-free vulnerability in the libfsntfs_security_descriptor_values_free function within libfsntfs, affecting versions through 2018-04-20. This flaw, triggered by a crafted NTFS file, could lead to a denial of service. Rated Medium (CVSS 5.5), it requires local access and user interaction (e.g., opening a malicious file) to achieve high availability impact, with no confidentiality or integrity impact. Despite the vendor disputing the claim, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 20180420CPE matchmatch criteria | cpe:2.3:a:libfsntfs_project:libfsntfs:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.