MNBSD-2023-15: msdosfs data disclosure

Description

A user with write access to files on a msdosfs file system may be able to read unintended data (for example, from a previously deleted file).

Affected Versions

msdosfs

Specific versions:

• 3.0.0
• 3.0.1
• 3.0.2
• 3.1.0

Recommendations

No specific recommendations provided.

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-5368
• https://www.freebsd.org/security/advisories/FreeBSD-SA-23:12.msdosfs.asc

Additional Information

Aliases: FreeBSD-SA-23:12.msdosfs, CVE-2023-5368

Published: December 28, 2023
Last Modified: December 28, 2023