An integer underflow issue exists in ntfs-3g 2017.3.23. A local attacker could potentially exploit this by running /bin/ntfs-3g with specially crafted arguments from a specially crafted directory to cause a heap buffer overflow, resulting in a crash or the ability to execute arbitrary code. In installations where /bin/ntfs-3g is a setuid-root binary, this could lead to a local escalation of privileges.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade netcf-libsUpgrade libiscsiUpgrade libiscsi-utilsUpgrade sgabios-binUpgrade netcfUpgrade netcf-develUpgrade sgabiosUpgrade libiscsi-devel | May 4, 2022 | Jun 5, 2019 |
| Alpine Linux | — | Upgrade ntfs-3g | Mar 26, 2024 | Jun 5, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libguestfs-winsupport | Oct 28, 2020 | Jun 5, 2019 |
| Centos_linux | — | Upgrade netcf-debuginfoUpgrade libvirt-daemon-config-networkUpgrade qemu-kvm-block-rbd-debuginfoUpgrade virt-dib-debuginfoUpgrade libguestfs-tools-cUpgrade perl-Sys-Virt-debugsourceUpgrade libvirt-daemon-driver-secretUpgrade qemu-kvm-block-curl-debuginfoUpgrade libguestfs-benchmarking-debuginfoUpgrade libvirt-debugsourceUpgrade seabios-binUpgrade python3-libguestfs-debuginfoUpgrade nbdkit-plugin-vddkUpgrade netcf-debugsourceUpgrade qemu-guest-agent-debuginfoUpgrade nbdkit-plugin-python3Upgrade supermin-debugsourceUpgrade libvirt-develUpgrade libvirt-dbusUpgrade libvirt-daemon-kvmUpgrade nbdkit-example-pluginsUpgrade qemu-kvm-common-debuginfoUpgrade libiscsi-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade libguestfsUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade nbdkitUpgrade libguestfs-develUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libvirt-client-debuginfoUpgrade qemu-img-debuginfoUpgrade libguestfs-toolsUpgrade libvirt-adminUpgrade qemu-guest-agentUpgrade libvirt-daemon-debuginfoUpgrade hivex-develUpgrade nbdkit-plugin-gzipUpgrade libiscsi-utilsUpgrade python3-libvirtUpgrade libvirt-daemon-config-nwfilterUpgrade libguestfs-man-pages-jaUpgrade ruby-libguestfs-debuginfoUpgrade virt-v2vUpgrade sgabios-binUpgrade netcfUpgrade perl-Sys-VirtUpgrade python3-libvirt-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libguestfs-javaUpgrade libguestfs-tools-c-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade virt-p2v-makerUpgrade qemu-kvm-block-curlUpgrade python3-hivex-debuginfoUpgrade libvirt-libsUpgrade libvirt-python-debugsourceUpgrade libguestfs-java-debuginfoUpgrade hivex-debuginfoUpgrade libguestfs-java-develUpgrade libguestfs-debuginfoUpgrade libguestfs-man-pages-ukUpgrade nbdkit-basic-plugins-debuginfoUpgrade virt-v2v-debuginfoUpgrade nbdkit-bash-completionUpgrade lua-guestfs-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-xfsUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-lock-sanlockUpgrade perl-Sys-Virt-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemonUpgrade netcf-libsUpgrade libvirt-daemon-driver-storage-scsiUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-block-iscsiUpgrade libguestfs-rsyncUpgrade virt-dibUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade nbdkit-example-plugins-debuginfoUpgrade nbdkit-debuginfoUpgrade libguestfs-debugsourceUpgrade supermin-debuginfoUpgrade netcf-libs-debuginfoUpgrade perl-hivex-debuginfoUpgrade qemu-kvm-block-sshUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-nss-debuginfoUpgrade hivex-debugsourceUpgrade libguestfs-gfs2Upgrade libvirt-libs-debuginfoUpgrade qemu-kvm-coreUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libguestfs-winsupportUpgrade libguestfs-gobject-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libiscsiUpgrade nbdkit-plugin-xz-debuginfoUpgrade libguestfs-inspect-iconsUpgrade libvirt-debuginfoUpgrade qemu-kvm-block-glusterUpgrade libvirt-bash-completionUpgrade seavgabios-binUpgrade seabiosUpgrade netcf-develUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade nbdkit-debugsourceUpgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade perl-hivexUpgrade libguestfs-benchmarkingUpgrade libvirt-daemon-driver-interfaceUpgrade python3-hivexUpgrade libvirt-lock-sanlock-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade ruby-hivexUpgrade nbdkit-plugin-xzUpgrade libvirt-dbus-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-coreUpgrade hivexUpgrade libiscsi-develUpgrade libvirt-clientUpgrade qemu-kvm-block-rbdUpgrade perl-Sys-Guestfs-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libguestfs-gobjectUpgrade libguestfs-gobject-develUpgrade libvirt-daemon-driver-networkUpgrade qemu-kvm-core-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade ruby-libguestfsUpgrade nbdkit-develUpgrade nbdkit-plugin-gzip-debuginfoUpgrade sgabiosUpgrade lua-guestfsUpgrade ruby-hivex-debuginfoUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade nbdkit-plugin-python3-debuginfoUpgrade python3-libguestfsUpgrade libvirt-admin-debuginfoUpgrade libguestfs-bash-completionUpgrade libvirt-nssUpgrade libvirtUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade qemu-imgUpgrade superminUpgrade nbdkit-basic-pluginsUpgrade supermin-develUpgrade libguestfs-javadocUpgrade qemu-kvm-debugsourceUpgrade libguestfs-rescueUpgrade libvirt-daemon-driver-storage-rbdUpgrade perl-Sys-GuestfsUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libiscsi-debugsource | Aug 28, 2019 | Jun 5, 2019 |
| Debian | — | Upgrade ntfs-3g | Mar 22, 2019 | Mar 22, 2019 |
| Gentoo Linux | — | Upgrade sys-fs/ntfs3g. | Jul 28, 2020 | Jun 5, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libguestfs-winsupport | Jun 17, 2020 | Jun 5, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libguestfs-winsupport | Nov 19, 2019 | Jun 5, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libguestfs-winsupport | Nov 19, 2019 | Jun 5, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ntfsprogsUpgrade ntfs-3g | Jul 31, 2020 | Jun 5, 2019 |
| Oracle_linux | — | Upgrade libvirt-daemon-driver-nwfilterUpgrade lua-guestfsUpgrade libvirt-clientUpgrade supermin-develUpgrade libguestfs-benchmarkingUpgrade libguestfs-rescueUpgrade nbdkit-develUpgrade libvirt-daemon-driver-nodedevUpgrade libguestfs-inspect-iconsUpgrade libguestfsUpgrade ocaml-hivexUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-nssUpgrade libiscsi-utilsUpgrade libvirt-daemonUpgrade qemu-guest-agentUpgrade qemu-kvmUpgrade seabios-binUpgrade qemu-kvm-block-glusterUpgrade libguestfs-javadocUpgrade libiscsiUpgrade libvirt-lock-sanlockUpgrade libvirtUpgrade python3-libguestfsUpgrade libguestfs-winsupportUpgrade perl-Sys-GuestfsUpgrade libguestfs-man-pages-ukUpgrade seabiosUpgrade virt-p2v-makerUpgrade libvirt-daemon-config-networkUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storage-glusterUpgrade nbdkit-plugin-gzipUpgrade libguestfs-gobject-develUpgrade qemu-kvm-block-curlUpgrade libvirt-daemon-kvmUpgrade netcf-libsUpgrade ruby-libguestfsUpgrade python3-libvirtUpgrade libguestfs-bash-completionUpgrade hivex-develUpgrade libguestfs-gobjectUpgrade qemu-kvm-testsUpgrade libiscsi-develUpgrade libvirt-daemon-driver-networkUpgrade nbdkit-basic-pluginsUpgrade ocaml-libguestfsUpgrade qemu-kvm-coreUpgrade netcfUpgrade ocaml-hivex-develUpgrade libguestfs-xfsUpgrade nbdkitUpgrade perl-hivexUpgrade sgabiosUpgrade nbdkit-bash-completionUpgrade libvirt-daemon-driver-storageUpgrade libguestfs-java-develUpgrade superminUpgrade libvirt-develUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libguestfs-toolsUpgrade virt-dibUpgrade nbdkit-example-pluginsUpgrade hivexUpgrade libguestfs-develUpgrade nbdkit-plugin-xzUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storage-scsiUpgrade nbdkit-plugin-python3Upgrade qemu-kvm-block-iscsiUpgrade virt-v2vUpgrade libvirt-daemon-driver-storage-mpathUpgrade ocaml-libguestfs-develUpgrade libvirt-daemon-driver-storage-rbdUpgrade qemu-kvm-block-rbdUpgrade libguestfs-gfs2Upgrade libvirt-daemon-config-nwfilterUpgrade qemu-imgUpgrade python3-hivexUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-storage-diskUpgrade ruby-hivexUpgrade perl-Sys-VirtUpgrade netcf-develUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-adminUpgrade libguestfs-man-pages-jaUpgrade seavgabios-binUpgrade sgabios-binUpgrade qemu-kvm-block-sshUpgrade libvirt-daemon-driver-storage-coreUpgrade nbdkit-plugin-vddkUpgrade libguestfs-rsyncUpgrade nbdkit-plugin-python-commonUpgrade libvirt-libsUpgrade libvirt-daemon-driver-interfaceUpgrade libguestfs-tools-cUpgrade libguestfs-javaUpgrade qemu-kvm-common | Jul 21, 2020 | Mar 21, 2019 |
| Redhat_linux | — | Upgrade libguestfs-gfs2Upgrade nbdkit-plugin-xzUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libguestfs-gobject-develUpgrade libguestfs-bash-completionUpgrade libvirt-nss-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade qemu-kvm-testsUpgrade libguestfs-benchmarkingUpgrade perl-hivexUpgrade seabiosUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-clientUpgrade qemu-kvm-core-debuginfoUpgrade libguestfs-debuginfoUpgrade ocaml-hivexUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-client-debuginfoUpgrade ruby-libguestfsUpgrade libvirtUpgrade lua-guestfsUpgrade nbdkit-basic-plugins-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-lock-sanlock-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-admin-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade libguestfs-inspect-iconsUpgrade libiscsi-develUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-driver-qemuUpgrade supermin-develUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libguestfs-rescueUpgrade nbdkit-debugsourceUpgrade libguestfs-gobjectUpgrade ruby-hivexUpgrade libvirt-bash-completionUpgrade ocaml-libguestfs-debuginfoUpgrade nbdkit-plugin-python3-debuginfoUpgrade libiscsi-debuginfoUpgrade libguestfs-winsupportUpgrade hivex-debuginfoUpgrade seavgabios-binUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade libguestfs-javadocUpgrade libguestfs-debugsourceUpgrade perl-Sys-Guestfs-debuginfoUpgrade hivex-debugsourceUpgrade hivexUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade qemu-kvm-block-glusterUpgrade nbdkit-develUpgrade libvirt-nssUpgrade perl-hivex-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade supermin-debuginfoNo solution existsUpgrade qemu-kvm-block-rbd-debuginfoUpgrade seabios-binUpgrade libvirt-daemon-kvmUpgrade perl-Sys-Virt-debuginfoUpgrade netcf-libs-debuginfoUpgrade netcf-develUpgrade libvirt-dbus-debuginfoUpgrade libvirt-libs-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade SLOFUpgrade virt-dib-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade qemu-imgUpgrade python3-hivexUpgrade perl-Sys-GuestfsUpgrade qemu-kvmUpgrade ruby-hivex-debuginfoUpgrade virt-p2v-makerUpgrade qemu-kvm-coreUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade libvirt-debuginfoUpgrade qemu-img-debuginfoUpgrade ocaml-libguestfsUpgrade libguestfsUpgrade libvirt-daemon-driver-storage-coreUpgrade python3-libvirtUpgrade virt-v2vUpgrade qemu-kvm-commonUpgrade python3-libguestfsUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-glusterUpgrade libiscsi-debugsourceUpgrade libguestfs-man-pages-ukUpgrade ocaml-hivex-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade libguestfs-rsyncUpgrade libguestfs-benchmarking-debuginfoUpgrade qemu-kvm-block-rbdUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-adminUpgrade qemu-kvm-block-sshUpgrade sgabiosUpgrade supermin-debugsourceUpgrade virt-v2v-debuginfoUpgrade nbdkit-plugin-gzipUpgrade python3-libguestfs-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade libvirt-libsUpgrade qemu-kvm-block-iscsiUpgrade libguestfs-xfsUpgrade nbdkitUpgrade libiscsi-utilsUpgrade libiscsiUpgrade nbdkit-example-pluginsUpgrade libvirt-daemon-driver-storageUpgrade superminUpgrade qemu-guest-agentUpgrade libguestfs-tools-cUpgrade nbdkit-bash-completionUpgrade libguestfs-toolsUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade libvirt-develUpgrade qemu-kvm-tests-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade netcf-debuginfoUpgrade qemu-kvm-debugsourceUpgrade libguestfs-javaUpgrade nbdkit-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade python3-hivex-debuginfoUpgrade libvirt-debugsourceUpgrade libvirt-daemon-driver-storage-iscsiUpgrade ocaml-libguestfs-develUpgrade netcfUpgrade perl-Sys-Virt-debugsourceUpgrade python3-libvirt-debuginfoUpgrade virt-dibUpgrade qemu-kvm-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade netcf-libsUpgrade netcf-debugsourceUpgrade nbdkit-plugin-vddkUpgrade sgabios-binUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade libguestfs-man-pages-jaUpgrade nbdkit-plugin-vddk-debuginfoUpgrade hivex-develUpgrade libguestfs-java-develUpgrade nbdkit-example-plugins-debuginfoUpgrade libvirt-dbusUpgrade ruby-libguestfs-debuginfoUpgrade lua-guestfs-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-daemonUpgrade libguestfs-develUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-config-networkUpgrade qemu-kvm-block-curlUpgrade libvirt-lock-sanlockUpgrade perl-Sys-VirtUpgrade libvirt-daemon-driver-storage-diskUpgrade nbdkit-plugin-python3Upgrade ocaml-hivex-develUpgrade libvirt-python-debugsourceUpgrade libguestfs-java-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfo | Aug 7, 2019 | Jun 5, 2019 |
| Rocky_linux | — | Upgrade libiscsiUpgrade netcf-debugsourceUpgrade libiscsi-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade netcfUpgrade libiscsi-utilsUpgrade netcf-libsUpgrade sgabiosUpgrade libiscsi-debugsourceUpgrade netcf-debuginfoUpgrade netcf-develUpgrade libiscsi-develUpgrade netcf-libs-debuginfo | Mar 12, 2024 | Jun 5, 2019 |
| Suse | — | Upgrade ntfsprogs-extraUpgrade libntfs-3g84Upgrade libntfs-3g-develUpgrade ntfs-3gUpgrade libntfs-3g87Upgrade ntfsprogs | Apr 24, 2019 | Mar 21, 2019 |
| Ubuntu | — | Upgrade ntfs-3g | Apr 1, 2019 | Mar 21, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub