An integer underflow issue exists in ntfs-3g 2017.3.23. A local attacker could potentially exploit this by running /bin/ntfs-3g with specially crafted arguments from a specially crafted directory to cause a heap buffer overflow, resulting in a crash or the ability to execute arbitrary code. In installations where /bin/ntfs-3g is a setuid-root binary, this could lead to a local escalation of privileges.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libiscsi-develUpgrade sgabios-binUpgrade netcf-develUpgrade netcfUpgrade sgabiosUpgrade libiscsi-utilsUpgrade netcf-libsUpgrade libiscsi | May 4, 2022 | Jun 5, 2019 |
| Alpine Linux | — | Upgrade ntfs-3g | Mar 26, 2024 | Jun 5, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libguestfs-winsupport | Oct 28, 2020 | Jun 5, 2019 |
| Centos_linux | — | Upgrade python3-libvirtUpgrade lua-guestfs-debuginfoUpgrade libvirt-libsUpgrade hivex-develUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libiscsi-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade python3-hivex-debuginfoUpgrade libvirt-python-debugsourceUpgrade nbdkit-debuginfoUpgrade libguestfs-tools-c-debuginfoUpgrade netcfUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libguestfs-rsyncUpgrade virt-p2v-makerUpgrade sgabios-binUpgrade qemu-kvm-block-iscsiUpgrade libguestfs-java-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade python3-libvirt-debuginfoUpgrade netcf-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade qemu-img-debuginfoUpgrade virt-v2v-debuginfoUpgrade libvirt-lock-sanlockUpgrade libguestfs-xfsUpgrade nbdkit-bash-completionUpgrade nbdkit-example-pluginsUpgrade nbdkit-basic-plugins-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-debuginfoUpgrade qemu-guest-agentUpgrade qemu-guest-agent-debuginfoUpgrade netcf-debugsourceUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libvirt-client-debuginfoUpgrade libvirt-daemon-kvmUpgrade seabios-binUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade nbdkit-plugin-vddkUpgrade libiscsi-utils-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade libguestfs-toolsUpgrade virt-dib-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade perl-Sys-VirtUpgrade libguestfs-man-pages-jaUpgrade ruby-libguestfs-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade virt-dibUpgrade libguestfs-javaUpgrade virt-v2vUpgrade libguestfs-develUpgrade libiscsi-utilsUpgrade nbdkit-plugin-python-commonUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-java-develUpgrade nbdkitUpgrade nbdkit-plugin-gzipUpgrade nbdkit-example-plugins-debuginfoUpgrade supermin-debugsourceUpgrade netcf-libsUpgrade libguestfsUpgrade hivex-debuginfoUpgrade libvirt-daemonUpgrade qemu-kvm-debuginfoUpgrade libvirt-adminUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade libguestfs-benchmarking-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade libvirt-dbusUpgrade libvirt-develUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-common-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade nbdkit-plugin-python3Upgrade libguestfs-man-pages-ukUpgrade libguestfs-tools-cUpgrade libvirt-daemon-config-networkUpgrade libvirt-debugsourceUpgrade libvirt-daemon-driver-networkUpgrade libguestfs-gobject-develUpgrade superminUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-clientUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade ruby-hivex-debuginfoUpgrade libguestfs-bash-completionUpgrade libvirt-docsUpgrade netcf-libs-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libiscsiUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade libguestfs-javadocUpgrade libguestfs-winsupportUpgrade qemu-kvm-coreUpgrade supermin-develUpgrade seavgabios-binUpgrade qemu-imgUpgrade seabiosUpgrade netcf-develUpgrade libvirt-daemon-driver-storage-iscsiUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-driver-storage-coreUpgrade libiscsi-develUpgrade libguestfs-gfs2Upgrade libvirt-lock-sanlock-debuginfoUpgrade sgabiosUpgrade libvirt-bash-completionUpgrade python3-libguestfsUpgrade libvirt-nssUpgrade libvirt-admin-debuginfoUpgrade supermin-debuginfoUpgrade libguestfs-debugsourceUpgrade libvirt-libs-debuginfoUpgrade ruby-hivexUpgrade perl-hivexUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade nbdkit-debugsourceUpgrade libvirt-daemon-driver-interfaceUpgrade python3-hivexUpgrade qemu-kvmUpgrade libvirt-debuginfoUpgrade libvirt-nss-debuginfoUpgrade nbdkit-plugin-python3-debuginfoUpgrade libvirtUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade qemu-kvm-block-sshUpgrade perl-hivex-debuginfoUpgrade hivex-debugsourceUpgrade libiscsi-debugsourceUpgrade qemu-kvm-block-glusterUpgrade libguestfs-rescueUpgrade libguestfs-inspect-iconsUpgrade nbdkit-develUpgrade nbdkit-plugin-xzUpgrade qemu-kvm-core-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade ruby-libguestfsUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade lua-guestfsUpgrade nbdkit-plugin-xz-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade qemu-kvm-commonUpgrade libguestfs-benchmarkingUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-rbdUpgrade perl-Sys-GuestfsUpgrade qemu-kvm-debugsourceUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade qemu-kvm-block-rbdUpgrade hivexUpgrade libguestfs-gobjectUpgrade perl-Sys-Guestfs-debuginfo | Aug 28, 2019 | Jun 5, 2019 |
| Debian | — | Upgrade ntfs-3g | Mar 22, 2019 | Mar 22, 2019 |
| Gentoo Linux | — | Upgrade sys-fs/ntfs3g. | Jul 28, 2020 | Jun 5, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libguestfs-winsupport | Jun 17, 2020 | Jun 5, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libguestfs-winsupport | Nov 19, 2019 | Jun 5, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libguestfs-winsupport | Nov 19, 2019 | Jun 5, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ntfsprogsUpgrade ntfs-3g | Jul 31, 2020 | Jun 5, 2019 |
| Oracle_linux | — | Upgrade libvirt-daemon-driver-storageUpgrade nbdkit-bash-completionUpgrade sgabiosUpgrade libvirt-daemon-driver-storage-diskUpgrade nbdkit-plugin-xzUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-dbusUpgrade libguestfs-java-develUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-mpathUpgrade qemu-kvm-block-sshUpgrade libguestfs-rsyncUpgrade libguestfs-tools-cUpgrade libvirt-daemon-driver-interfaceUpgrade ruby-hivexUpgrade seavgabios-binUpgrade libvirt-docsUpgrade libvirt-libsUpgrade superminUpgrade virt-dibUpgrade nbdkit-example-pluginsUpgrade libvirt-adminUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libguestfs-toolsUpgrade libvirt-develUpgrade netcfUpgrade nbdkit-plugin-python-commonUpgrade nbdkit-plugin-python3Upgrade nbdkitUpgrade libvirt-daemon-driver-storage-scsiUpgrade hivexUpgrade libguestfs-javaUpgrade libguestfs-xfsUpgrade qemu-kvm-commonUpgrade sgabios-binUpgrade libguestfs-gfs2Upgrade perl-hivexUpgrade python3-hivexUpgrade qemu-imgUpgrade qemu-kvm-block-rbdUpgrade ocaml-hivex-develUpgrade ocaml-libguestfs-develUpgrade libguestfs-develUpgrade netcf-develUpgrade libvirt-daemon-driver-storage-logicalUpgrade nbdkit-plugin-vddkUpgrade libvirt-daemon-driver-storage-rbdUpgrade perl-Sys-VirtUpgrade virt-v2vUpgrade qemu-kvm-block-iscsiUpgrade libguestfs-man-pages-jaUpgrade libguestfs-gobjectUpgrade libguestfs-gobject-develUpgrade nbdkit-develUpgrade libvirt-daemonUpgrade libguestfs-bash-completionUpgrade libvirt-daemon-kvmUpgrade python3-libguestfsUpgrade nbdkit-plugin-gzipUpgrade netcf-libsUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-nwfilterUpgrade lua-guestfsUpgrade supermin-develUpgrade ocaml-hivexUpgrade libguestfs-rescueUpgrade libguestfs-benchmarkingUpgrade libguestfsUpgrade libvirt-clientUpgrade libguestfs-javadocUpgrade seabiosUpgrade libvirt-bash-completionUpgrade libguestfs-man-pages-ukUpgrade libguestfs-inspect-iconsUpgrade ruby-libguestfsUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-lock-sanlockUpgrade virt-p2v-makerUpgrade qemu-kvm-testsUpgrade libiscsi-utilsUpgrade libguestfs-winsupportUpgrade hivex-develUpgrade libvirt-daemon-config-networkUpgrade libiscsiUpgrade libvirtUpgrade libvirt-nssUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-driver-networkUpgrade libiscsi-develUpgrade qemu-kvm-block-glusterUpgrade perl-Sys-GuestfsUpgrade qemu-guest-agentUpgrade qemu-kvmUpgrade seabios-binUpgrade libvirt-daemon-driver-nodedevUpgrade qemu-kvm-coreUpgrade qemu-kvm-block-curlUpgrade python3-libvirtUpgrade ocaml-libguestfs | Jul 21, 2020 | Mar 21, 2019 |
| Redhat_linux | — | Upgrade sgabiosUpgrade virt-v2v-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade qemu-kvm-block-curlUpgrade libvirt-dbus-debugsourceUpgrade sgabios-binUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-daemonUpgrade nbdkit-plugin-python3Upgrade libguestfs-xfsUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade virt-dibUpgrade nbdkitUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade nbdkit-plugin-vddkUpgrade nbdkit-bash-completionUpgrade libvirt-daemon-driver-storage-scsiUpgrade python3-libvirt-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade netcf-debuginfoUpgrade libvirt-develUpgrade perl-Sys-Virt-debugsourceUpgrade qemu-kvm-tests-debuginfoUpgrade libiscsiUpgrade qemu-kvm-debuginfoUpgrade libvirt-dbusUpgrade ocaml-hivex-debuginfoUpgrade libguestfs-tools-c-debuginfoUpgrade nbdkit-plugin-gzipUpgrade qemu-kvm-block-sshUpgrade libguestfs-rsyncUpgrade nbdkit-example-plugins-debuginfoUpgrade perl-Sys-VirtUpgrade libguestfs-benchmarking-debuginfoUpgrade qemu-kvm-debugsourceUpgrade libvirt-daemon-driver-storage-mpathUpgrade ocaml-libguestfs-develUpgrade libguestfs-develUpgrade libguestfs-man-pages-jaUpgrade supermin-debugsourceUpgrade libvirt-libsUpgrade libvirt-debugsourceUpgrade python3-hivex-debuginfoUpgrade libguestfs-javaUpgrade libvirt-adminUpgrade ruby-libguestfs-debuginfoUpgrade lua-guestfs-debuginfoUpgrade nbdkit-debuginfoUpgrade libguestfs-java-debuginfoUpgrade libvirt-python-debugsourceUpgrade superminUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-config-networkUpgrade netcf-debugsourceUpgrade libvirt-daemon-driver-storage-iscsiUpgrade nbdkit-example-pluginsUpgrade qemu-kvm-block-gluster-debuginfoUpgrade ocaml-hivex-develUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libiscsi-utilsUpgrade qemu-kvm-block-iscsiUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade libguestfs-toolsUpgrade libguestfs-tools-cUpgrade qemu-guest-agentUpgrade hivex-develUpgrade netcf-libsUpgrade libguestfs-java-develUpgrade python3-libguestfs-debuginfoUpgrade netcfUpgrade libvirt-daemon-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libvirt-lock-sanlockUpgrade qemu-kvm-block-rbdUpgrade libguestfs-man-pages-ukUpgrade nbdkit-basic-plugins-debuginfoUpgrade supermin-debuginfoUpgrade qemu-kvm-commonUpgrade libiscsi-debugsourceUpgrade libguestfs-winsupportUpgrade ocaml-libguestfs-debuginfoUpgrade qemu-kvm-testsUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-docsUpgrade libvirt-nss-debuginfoUpgrade nbdkit-plugin-xzUpgrade nbdkit-plugin-gzip-debuginfoUpgrade netcf-libs-debuginfoUpgrade libvirt-admin-debuginfoUpgrade ruby-libguestfsUpgrade qemu-kvm-block-ssh-debuginfoUpgrade hivexUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libiscsi-debuginfoUpgrade python3-libguestfsUpgrade qemu-kvm-block-glusterUpgrade nbdkit-plugin-python3-debuginfoUpgrade libvirt-client-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade libguestfs-gobjectUpgrade libguestfs-rescueUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade ruby-hivexUpgrade libguestfs-benchmarkingUpgrade libvirt-daemon-driver-nodedevUpgrade libguestfs-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade qemu-img-debuginfoUpgrade perl-hivexUpgrade libvirt-daemon-driver-networkUpgrade qemu-kvm-common-debuginfoUpgrade libguestfs-gobject-develUpgrade libvirt-bash-completionUpgrade python3-libvirtUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade qemu-imgUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-clientUpgrade libguestfs-gfs2Upgrade lua-guestfsUpgrade seabiosUpgrade virt-dib-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirtUpgrade perl-hivex-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade libvirt-daemon-kvmUpgrade seabios-binUpgrade libguestfs-javadocUpgrade libguestfs-debugsourceUpgrade libvirt-nssUpgrade qemu-kvm-block-rbd-debuginfoNo solution existsUpgrade libvirt-dbus-debuginfoUpgrade ocaml-hivexUpgrade virt-p2v-makerUpgrade qemu-kvm-core-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade qemu-kvm-coreUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade nbdkit-develUpgrade netcf-develUpgrade ocaml-libguestfsUpgrade virt-v2vUpgrade hivex-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade libvirt-lock-sanlock-debuginfoUpgrade perl-Sys-GuestfsUpgrade libiscsi-develUpgrade supermin-develUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade SLOFUpgrade perl-Sys-Virt-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade libguestfsUpgrade python3-hivexUpgrade qemu-kvmUpgrade nbdkit-basic-pluginsUpgrade libvirt-libs-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade ruby-hivex-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade seavgabios-binUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libguestfs-bash-completionUpgrade libguestfs-inspect-iconsUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade nbdkit-debugsourceUpgrade hivex-debugsource | Aug 7, 2019 | Jun 5, 2019 |
| Rocky_linux | — | Upgrade libiscsi-utilsUpgrade netcf-debugsourceUpgrade netcf-libsUpgrade libiscsiUpgrade libiscsi-utils-debuginfoUpgrade netcfUpgrade libiscsi-debuginfoUpgrade netcf-debuginfoUpgrade netcf-develUpgrade sgabiosUpgrade libiscsi-develUpgrade netcf-libs-debuginfoUpgrade libiscsi-debugsource | Mar 12, 2024 | Jun 5, 2019 |
| Suse | — | Upgrade libntfs-3g84Upgrade ntfsprogs-extraUpgrade ntfsprogsUpgrade ntfs-3gUpgrade libntfs-3g-develUpgrade libntfs-3g87 | Apr 24, 2019 | Mar 21, 2019 |
| Ubuntu | — | Upgrade ntfs-3g | Apr 1, 2019 | Mar 21, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub