An integer underflow issue exists in ntfs-3g 2017.3.23. A local attacker could potentially exploit this by running /bin/ntfs-3g with specially crafted arguments from a specially crafted directory to cause a heap buffer overflow, resulting in a crash or the ability to execute arbitrary code. In installations where /bin/ntfs-3g is a setuid-root binary, this could lead to a local escalation of privileges.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade sgabios-binUpgrade sgabiosUpgrade netcf-develUpgrade libiscsi-develUpgrade netcfUpgrade libiscsiUpgrade netcf-libsUpgrade libiscsi-utils | May 4, 2022 | Jun 5, 2019 |
| Alpine Linux | — | Upgrade ntfs-3g | Mar 26, 2024 | Jun 5, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libguestfs-winsupport | Oct 28, 2020 | Jun 5, 2019 |
| Centos_linux | — | Upgrade libiscsi-utils-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade netcf-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade virt-v2v-debuginfoUpgrade perl-Sys-VirtUpgrade libguestfs-man-pages-jaUpgrade qemu-kvm-block-iscsiUpgrade qemu-kvm-block-gluster-debuginfoUpgrade python3-libvirt-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade nbdkit-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade netcfUpgrade libvirt-python-debugsourceUpgrade qemu-kvm-block-curl-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade netcf-libsUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade hivex-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade libguestfs-java-debuginfoUpgrade virt-v2vUpgrade nbdkit-example-pluginsUpgrade qemu-guest-agent-debuginfoUpgrade seabios-binUpgrade qemu-guest-agentUpgrade netcf-debugsourceUpgrade nbdkit-plugin-vddkUpgrade libvirt-daemon-kvmUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade nbdkit-plugin-python3Upgrade nbdkit-example-plugins-debuginfoUpgrade libguestfs-tools-cUpgrade libvirt-daemon-config-networkUpgrade nbdkit-basic-plugins-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade qemu-img-debuginfoUpgrade python3-libvirtUpgrade libguestfsUpgrade sgabios-binUpgrade nbdkit-plugin-gzipUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-adminUpgrade nbdkit-plugin-vddk-debuginfoUpgrade nbdkitUpgrade nbdkit-plugin-python-commonUpgrade libguestfs-develUpgrade python3-hivex-debuginfoUpgrade qemu-kvm-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade lua-guestfs-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade libguestfs-man-pages-ukUpgrade libguestfs-java-develUpgrade libiscsi-debuginfoUpgrade nbdkit-bash-completionUpgrade libvirt-lock-sanlockUpgrade libguestfs-xfsUpgrade libvirt-daemon-driver-nwfilterUpgrade libguestfs-benchmarking-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade python3-libguestfs-debuginfoUpgrade libvirt-debugsourceUpgrade virt-p2v-makerUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libguestfs-tools-c-debuginfoUpgrade libguestfs-rsyncUpgrade libguestfs-debuginfoUpgrade libvirt-libsUpgrade qemu-kvm-block-curlUpgrade libvirt-client-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libvirt-daemonUpgrade libvirt-dbus-debugsourceUpgrade virt-dib-debuginfoUpgrade libguestfs-toolsUpgrade libguestfs-javaUpgrade libvirt-dbusUpgrade supermin-debugsourceUpgrade libiscsi-utilsUpgrade hivex-develUpgrade libvirt-develUpgrade virt-dibUpgrade sgabiosUpgrade netcf-libs-debuginfoUpgrade hivexUpgrade python3-libguestfsUpgrade libvirt-daemon-driver-storage-rbdUpgrade libiscsi-debugsourceUpgrade libvirt-daemon-driver-nodedevUpgrade libguestfs-rescueUpgrade qemu-kvm-debugsourceUpgrade qemu-kvm-block-sshUpgrade perl-Sys-GuestfsUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade nbdkit-develUpgrade libvirt-clientUpgrade perl-Sys-Guestfs-debuginfoUpgrade libguestfs-gobject-develUpgrade nbdkit-plugin-xzUpgrade libvirt-lock-sanlock-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade superminUpgrade nbdkit-basic-pluginsUpgrade libiscsiUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libguestfs-javadocUpgrade libguestfs-winsupportUpgrade qemu-imgUpgrade seabiosUpgrade supermin-develUpgrade seavgabios-binUpgrade netcf-develUpgrade qemu-kvm-coreUpgrade libvirt-docsUpgrade qemu-kvmUpgrade perl-hivexUpgrade libvirt-daemon-driver-interfaceUpgrade libguestfs-gobject-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libguestfs-benchmarkingUpgrade qemu-kvm-commonUpgrade python3-hivexUpgrade nbdkit-debugsourceUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-nssUpgrade nbdkit-plugin-python3-debuginfoUpgrade libvirt-bash-completionUpgrade libvirt-debuginfoUpgrade libvirt-admin-debuginfoUpgrade libguestfs-bash-completionUpgrade libvirt-daemon-driver-storage-diskUpgrade supermin-debuginfoUpgrade ruby-hivexUpgrade perl-hivex-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade qemu-kvm-block-rbdUpgrade libguestfs-gobjectUpgrade libguestfs-gfs2Upgrade qemu-kvm-core-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-libs-debuginfoUpgrade lua-guestfsUpgrade qemu-kvm-block-glusterUpgrade libvirtUpgrade libvirt-dbus-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-glusterUpgrade libguestfs-debugsourceUpgrade libvirt-nss-debuginfoUpgrade hivex-debugsourceUpgrade qemu-kvm-block-ssh-debuginfoUpgrade ruby-hivex-debuginfoUpgrade libiscsi-develUpgrade libguestfs-inspect-iconsUpgrade ruby-libguestfs | Aug 28, 2019 | Jun 5, 2019 |
| Debian | — | Upgrade ntfs-3g | Mar 22, 2019 | Mar 22, 2019 |
| Gentoo Linux | — | Upgrade sys-fs/ntfs3g. | Jul 28, 2020 | Jun 5, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libguestfs-winsupport | Jun 17, 2020 | Jun 5, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libguestfs-winsupport | Nov 19, 2019 | Jun 5, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libguestfs-winsupport | Nov 19, 2019 | Jun 5, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ntfs-3gUpgrade ntfsprogs | Jul 31, 2020 | Jun 5, 2019 |
| Oracle_linux | — | Upgrade virt-dibUpgrade libguestfs-tools-cUpgrade perl-hivexUpgrade libguestfs-rsyncUpgrade nbdkitUpgrade libguestfs-javaUpgrade libvirt-daemon-driver-interfaceUpgrade qemu-kvm-commonUpgrade libvirt-libsUpgrade netcfUpgrade ocaml-hivex-develUpgrade nbdkit-plugin-python-commonUpgrade qemu-imgUpgrade virt-v2vUpgrade python3-hivexUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-block-iscsiUpgrade libvirt-daemon-driver-storage-diskUpgrade nbdkit-plugin-vddkUpgrade superminUpgrade nbdkit-plugin-python3Upgrade libguestfs-java-develUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storageUpgrade libguestfs-gfs2Upgrade sgabiosUpgrade libguestfs-xfsUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-docsUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-storage-mpathUpgrade seavgabios-binUpgrade ruby-hivexUpgrade sgabios-binUpgrade qemu-kvm-block-sshUpgrade ocaml-libguestfs-develUpgrade netcf-develUpgrade libvirt-daemon-driver-storage-rbdUpgrade perl-Sys-VirtUpgrade libvirt-adminUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-config-nwfilterUpgrade nbdkit-plugin-xzUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-develUpgrade libguestfs-toolsUpgrade nbdkit-example-pluginsUpgrade hivexUpgrade libguestfs-man-pages-jaUpgrade nbdkit-bash-completionUpgrade libguestfs-develUpgrade libvirt-daemon-driver-networkUpgrade ocaml-hivexUpgrade libguestfsUpgrade libvirt-daemon-driver-storage-glusterUpgrade python3-libguestfsUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-gobject-develUpgrade virt-p2v-makerUpgrade seabiosUpgrade libvirt-daemon-config-networkUpgrade libvirt-bash-completionUpgrade qemu-kvm-coreUpgrade qemu-kvm-block-curlUpgrade python3-libvirtUpgrade ocaml-libguestfsUpgrade nbdkit-basic-pluginsUpgrade libiscsi-develUpgrade libguestfs-gobjectUpgrade libguestfs-bash-completionUpgrade qemu-kvmUpgrade qemu-guest-agentUpgrade seabios-binUpgrade qemu-kvm-block-glusterUpgrade perl-Sys-GuestfsUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-lock-sanlockUpgrade qemu-kvm-testsUpgrade ruby-libguestfsUpgrade libiscsiUpgrade libiscsi-utilsUpgrade libguestfs-inspect-iconsUpgrade libguestfs-winsupportUpgrade libguestfs-javadocUpgrade libvirtUpgrade libguestfs-man-pages-ukUpgrade hivex-develUpgrade nbdkit-develUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemonUpgrade libvirt-nssUpgrade netcf-libsUpgrade nbdkit-plugin-gzipUpgrade libvirt-daemon-kvmUpgrade libvirt-clientUpgrade libguestfs-benchmarkingUpgrade lua-guestfsUpgrade supermin-develUpgrade libvirt-daemon-driver-nwfilterUpgrade libguestfs-rescue | Jul 21, 2020 | Mar 21, 2019 |
| Redhat_linux | — | Upgrade qemu-kvm-coreUpgrade ocaml-hivexUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade nbdkit-develUpgrade virt-v2vUpgrade libguestfs-gfs2Upgrade qemu-kvm-testsUpgrade libvirt-client-debuginfoUpgrade ocaml-libguestfsUpgrade libiscsi-develUpgrade qemu-imgUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade qemu-kvm-block-glusterUpgrade libguestfs-gobject-debuginfoUpgrade libvirt-docsUpgrade libvirt-daemon-driver-networkUpgrade nbdkit-basic-plugins-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade qemu-img-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade libguestfs-gobject-develUpgrade libvirt-lock-sanlock-debuginfoUpgrade nbdkit-debugsourceUpgrade seavgabios-binUpgrade hivex-debugsourceUpgrade libvirt-daemon-driver-storage-glusterUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-commonUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libguestfs-bash-completionUpgrade libiscsi-debugsourceUpgrade libguestfs-inspect-iconsUpgrade ocaml-libguestfs-debuginfoUpgrade libiscsi-debuginfoUpgrade libguestfs-winsupportUpgrade nbdkit-plugin-xz-debuginfoUpgrade netcf-develUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-driver-network-debuginfoUpgrade nbdkit-plugin-python3-debuginfoUpgrade nbdkit-plugin-xzUpgrade python3-libvirtUpgrade perl-hivexUpgrade ruby-hivex-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libguestfs-gobjectUpgrade supermin-develUpgrade libvirt-daemon-driver-secretUpgrade libvirt-admin-debuginfoUpgrade libvirt-bash-completionUpgrade ruby-libguestfsUpgrade perl-Sys-Guestfs-debuginfoUpgrade perl-Sys-GuestfsUpgrade virt-p2v-makerUpgrade netcf-libs-debuginfoUpgrade libvirt-clientUpgrade seabiosUpgrade seabios-binUpgrade libguestfs-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade libguestfs-debugsourceUpgrade libguestfs-benchmarkingUpgrade libvirt-daemon-driver-storage-coreUpgrade qemu-kvmUpgrade SLOFUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-libs-debuginfoUpgrade supermin-debuginfoUpgrade hivex-debuginfoUpgrade libguestfsUpgrade perl-Sys-Virt-debuginfoUpgrade lua-guestfsUpgrade python3-libguestfsUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade hivexUpgrade libguestfs-rescueUpgrade libvirt-nss-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade libvirt-nssUpgrade perl-hivex-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirtUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libguestfs-javadocUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade python3-hivexUpgrade libvirt-daemon-kvmNo solution existsUpgrade ruby-hivexUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade virt-dib-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade lua-guestfs-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade nbdkit-plugin-gzipUpgrade perl-Sys-Virt-debugsourceUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade libguestfs-tools-c-debuginfoUpgrade libguestfs-man-pages-jaUpgrade libguestfs-java-develUpgrade netcfUpgrade sgabiosUpgrade ocaml-hivex-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-block-iscsiUpgrade qemu-kvm-block-sshUpgrade libvirt-adminUpgrade ruby-libguestfs-debuginfoUpgrade perl-Sys-VirtUpgrade qemu-kvm-debuginfoUpgrade virt-v2v-debuginfoUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-block-curl-debuginfoUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-scsiUpgrade netcf-debuginfoUpgrade libguestfs-tools-cUpgrade qemu-kvm-tests-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade nbdkit-bash-completionUpgrade libvirt-develUpgrade qemu-kvm-debugsourceUpgrade qemu-guest-agentUpgrade qemu-kvm-block-gluster-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade libvirt-daemon-driver-storage-mpathUpgrade libiscsi-utilsUpgrade ocaml-libguestfs-develUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-config-networkUpgrade netcf-libsUpgrade libvirt-libsUpgrade libguestfs-javaUpgrade superminUpgrade libguestfs-rsyncUpgrade libvirt-dbusUpgrade nbdkit-example-plugins-debuginfoUpgrade libguestfs-develUpgrade libguestfs-man-pages-ukUpgrade libvirt-debugsourceUpgrade nbdkit-debuginfoUpgrade qemu-kvm-block-rbdUpgrade sgabios-binUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade python3-libvirt-debuginfoUpgrade libvirt-python-debugsourceUpgrade nbdkit-example-pluginsUpgrade ocaml-hivex-develUpgrade netcf-debugsourceUpgrade libiscsiUpgrade python3-hivex-debuginfoUpgrade virt-dibUpgrade libguestfs-xfsUpgrade libguestfs-benchmarking-debuginfoUpgrade libguestfs-java-debuginfoUpgrade nbdkit-plugin-python3Upgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade nbdkitUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-storage-diskUpgrade hivex-develUpgrade nbdkit-plugin-vddkUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-iscsiUpgrade supermin-debugsourceUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libguestfs-toolsUpgrade libvirt-daemon-debuginfo | Aug 7, 2019 | Jun 5, 2019 |
| Rocky_linux | — | Upgrade libiscsi-debuginfoUpgrade libiscsiUpgrade netcf-libsUpgrade netcfUpgrade libiscsi-utils-debuginfoUpgrade libiscsi-utilsUpgrade netcf-debugsourceUpgrade netcf-libs-debuginfoUpgrade libiscsi-develUpgrade netcf-develUpgrade sgabiosUpgrade netcf-debuginfoUpgrade libiscsi-debugsource | Mar 12, 2024 | Jun 5, 2019 |
| Suse | — | Upgrade ntfsprogs-extraUpgrade libntfs-3g84Upgrade ntfsprogsUpgrade libntfs-3g87Upgrade ntfs-3gUpgrade libntfs-3g-devel | Apr 24, 2019 | Mar 21, 2019 |
| Ubuntu | — | Upgrade ntfs-3g | Apr 1, 2019 | Mar 21, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub