An integer underflow issue exists in ntfs-3g 2017.3.23. A local attacker could potentially exploit this by running /bin/ntfs-3g with specially crafted arguments from a specially crafted directory to cause a heap buffer overflow, resulting in a crash or the ability to execute arbitrary code. In installations where /bin/ntfs-3g is a setuid-root binary, this could lead to a local escalation of privileges.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade netcf-develUpgrade netcfUpgrade libiscsi-develUpgrade sgabiosUpgrade sgabios-binUpgrade libiscsi-utilsUpgrade libiscsiUpgrade netcf-libs | May 4, 2022 | Jun 5, 2019 |
| Alpine Linux | — | Upgrade ntfs-3g | Mar 26, 2024 | Jun 5, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libguestfs-winsupport | Oct 28, 2020 | Jun 5, 2019 |
| Centos_linux | — | Upgrade libvirtUpgrade libvirt-libs-debuginfoUpgrade libguestfs-debugsourceUpgrade libvirt-nss-debuginfoUpgrade libiscsi-develUpgrade qemu-kvmUpgrade python3-hivexUpgrade seavgabios-binUpgrade qemu-kvm-commonUpgrade libguestfs-bash-completionUpgrade nbdkit-plugin-python3-debuginfoUpgrade libvirt-admin-debuginfoUpgrade libguestfs-benchmarkingUpgrade lua-guestfsUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade nbdkit-debugsourceUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libguestfs-inspect-iconsUpgrade ruby-libguestfsUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade sgabiosUpgrade libvirt-daemon-driver-interfaceUpgrade qemu-kvm-block-glusterUpgrade qemu-kvm-core-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade ruby-hivex-debuginfoUpgrade ruby-hivexUpgrade libvirt-lock-sanlock-debuginfoUpgrade nbdkit-plugin-xzUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade nbdkit-develUpgrade libvirt-daemon-driver-storage-glusterUpgrade libguestfs-gobject-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade libiscsi-debugsourceUpgrade supermin-debuginfoUpgrade hivexUpgrade hivex-debugsourceUpgrade perl-Sys-Guestfs-debuginfoUpgrade qemu-imgUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libguestfs-gobjectUpgrade libvirt-docsUpgrade libguestfs-winsupportUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libiscsiUpgrade libguestfs-javadocUpgrade superminUpgrade libvirt-clientUpgrade libguestfs-gfs2Upgrade libguestfs-gobject-develUpgrade perl-hivexUpgrade libvirt-nssUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade supermin-develUpgrade python3-libguestfsUpgrade libvirt-bash-completionUpgrade netcf-develUpgrade qemu-kvm-block-rbdUpgrade seabiosUpgrade qemu-kvm-coreUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade qemu-kvm-debugsourceUpgrade libvirt-daemon-driver-storage-rbdUpgrade perl-hivex-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-diskUpgrade qemu-kvm-block-sshUpgrade libguestfs-rescueUpgrade netcf-libs-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade perl-Sys-GuestfsUpgrade seabios-binUpgrade libguestfs-benchmarking-debuginfoUpgrade python3-libvirt-debuginfoUpgrade libguestfs-tools-c-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade qemu-kvm-block-curlUpgrade libguestfs-xfsUpgrade virt-v2v-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade nbdkit-example-pluginsUpgrade libvirt-client-debuginfoUpgrade libguestfs-java-develUpgrade libiscsi-utilsUpgrade python3-libguestfs-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade hivex-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade libvirt-debugsourceUpgrade libvirt-daemon-driver-storage-scsiUpgrade nbdkit-plugin-python-commonUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade nbdkit-plugin-gzipUpgrade libguestfs-man-pages-ukUpgrade libguestfs-develUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade supermin-debugsourceUpgrade python3-libvirtUpgrade qemu-img-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade libguestfs-toolsUpgrade libvirt-dbusUpgrade libvirt-develUpgrade libguestfsUpgrade virt-dib-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade libvirt-daemon-config-nwfilterUpgrade perl-Sys-Virt-debuginfoUpgrade libguestfs-java-debuginfoUpgrade perl-Sys-VirtUpgrade nbdkit-example-plugins-debuginfoUpgrade libvirt-python-debugsourceUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storageUpgrade libvirt-dbus-debugsourceUpgrade libguestfs-man-pages-jaUpgrade libguestfs-javaUpgrade netcfUpgrade virt-v2vUpgrade ruby-libguestfs-debuginfoUpgrade qemu-kvm-block-iscsiUpgrade sgabios-binUpgrade qemu-kvm-block-gluster-debuginfoUpgrade nbdkit-debuginfoUpgrade libguestfs-tools-cUpgrade netcf-libsUpgrade qemu-kvm-debuginfoUpgrade libiscsi-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade qemu-guest-agentUpgrade nbdkit-bash-completionUpgrade libiscsi-utils-debuginfoUpgrade nbdkit-plugin-vddkUpgrade netcf-debugsourceUpgrade libvirt-daemon-kvmUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libvirt-libsUpgrade virt-dibUpgrade lua-guestfs-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-debuginfoUpgrade nbdkit-plugin-python3Upgrade nbdkitUpgrade libvirt-adminUpgrade qemu-kvm-block-curl-debuginfoUpgrade python3-hivex-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-config-networkUpgrade hivex-develUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade virt-p2v-makerUpgrade netcf-debuginfoUpgrade libguestfs-rsync | Aug 28, 2019 | Jun 5, 2019 |
| Debian | — | Upgrade ntfs-3g | Mar 22, 2019 | Mar 22, 2019 |
| Gentoo Linux | — | Upgrade sys-fs/ntfs3g. | Jul 28, 2020 | Jun 5, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libguestfs-winsupport | Jun 17, 2020 | Jun 5, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libguestfs-winsupport | Nov 19, 2019 | Jun 5, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libguestfs-winsupport | Nov 19, 2019 | Jun 5, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ntfsprogsUpgrade ntfs-3g | Jul 31, 2020 | Jun 5, 2019 |
| Oracle_linux | — | Upgrade seavgabios-binUpgrade libvirt-adminUpgrade perl-Sys-VirtUpgrade libguestfs-man-pages-jaUpgrade libvirt-daemon-driver-storage-logicalUpgrade libguestfs-develUpgrade netcf-develUpgrade ocaml-libguestfs-develUpgrade libvirt-daemon-driver-storage-rbdUpgrade nbdkitUpgrade perl-hivexUpgrade libguestfs-rsyncUpgrade libguestfs-tools-cUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-libsUpgrade libvirt-docsUpgrade qemu-imgUpgrade python3-hivexUpgrade nbdkit-plugin-python-commonUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storageUpgrade sgabiosUpgrade nbdkit-bash-completionUpgrade qemu-kvm-block-rbdUpgrade libvirt-develUpgrade hivexUpgrade libguestfs-java-develUpgrade virt-v2vUpgrade libvirt-daemon-driver-storage-scsiUpgrade qemu-kvm-block-iscsiUpgrade nbdkit-example-pluginsUpgrade libguestfs-xfsUpgrade nbdkit-plugin-python3Upgrade libguestfs-toolsUpgrade qemu-kvm-commonUpgrade libguestfs-gfs2Upgrade libguestfs-javaUpgrade ocaml-hivex-develUpgrade netcfUpgrade superminUpgrade qemu-kvm-block-sshUpgrade ruby-hivexUpgrade sgabios-binUpgrade virt-dibUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-iscsiUpgrade nbdkit-plugin-xzUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-dbusUpgrade nbdkit-plugin-vddkUpgrade netcf-libsUpgrade python3-libguestfsUpgrade libvirt-nssUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemonUpgrade libvirt-lock-sanlockUpgrade libguestfs-man-pages-ukUpgrade libguestfs-inspect-iconsUpgrade ruby-libguestfsUpgrade nbdkit-develUpgrade qemu-kvm-coreUpgrade qemu-kvm-block-curlUpgrade python3-libvirtUpgrade ocaml-libguestfsUpgrade nbdkit-basic-pluginsUpgrade libiscsi-develUpgrade libguestfs-gobjectUpgrade libguestfs-bash-completionUpgrade qemu-kvm-testsUpgrade libvirtUpgrade libguestfs-winsupportUpgrade hivex-develUpgrade qemu-guest-agentUpgrade libvirt-daemon-driver-nodedevUpgrade qemu-kvm-block-glusterUpgrade perl-Sys-GuestfsUpgrade libiscsi-utilsUpgrade qemu-kvmUpgrade seabios-binUpgrade libiscsiUpgrade supermin-develUpgrade libguestfsUpgrade lua-guestfsUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-clientUpgrade libguestfs-rescueUpgrade libguestfs-benchmarkingUpgrade ocaml-hivexUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storage-glusterUpgrade libguestfs-javadocUpgrade libvirt-daemon-driver-networkUpgrade virt-p2v-makerUpgrade seabiosUpgrade libvirt-bash-completionUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-secretUpgrade nbdkit-plugin-gzipUpgrade libguestfs-gobject-devel | Jul 21, 2020 | Mar 21, 2019 |
| Redhat_linux | — | Upgrade libguestfs-gobject-develUpgrade perl-Sys-Virt-debuginfoUpgrade libiscsi-debugsourceUpgrade libvirt-libs-debuginfoUpgrade qemu-kvm-commonUpgrade seabios-binUpgrade libvirt-admin-debuginfoUpgrade libvirt-clientUpgrade SLOFUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade virt-p2v-makerUpgrade qemu-img-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libguestfsUpgrade ocaml-libguestfsUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-logicalUpgrade nbdkit-basic-plugins-debuginfoUpgrade python3-hivexUpgrade nbdkit-basic-pluginsUpgrade qemu-kvm-block-glusterUpgrade hivexUpgrade nbdkit-plugin-python3-debuginfoUpgrade libvirt-bash-completionUpgrade netcf-develUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade ruby-libguestfsUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libguestfs-gobjectUpgrade seavgabios-binUpgrade perl-Sys-Guestfs-debuginfoUpgrade nbdkit-develUpgrade libiscsi-debuginfoUpgrade python3-libguestfsUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade perl-hivex-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade libguestfs-inspect-iconsUpgrade qemu-kvm-core-debuginfoUpgrade hivex-debugsourceUpgrade nbdkit-debugsourceUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libguestfs-javadocUpgrade libvirt-debuginfoUpgrade qemu-kvmUpgrade libvirt-client-debuginfoUpgrade ocaml-libguestfs-debuginfoUpgrade libguestfs-rescueUpgrade libvirt-daemon-driver-qemuUpgrade ruby-hivexUpgrade libvirt-daemon-kvmUpgrade libvirt-nssUpgrade nbdkit-plugin-xz-debuginfoUpgrade libguestfs-debuginfoUpgrade libguestfs-gfs2No solution existsUpgrade supermin-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade ocaml-hivexUpgrade netcf-libs-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade libguestfs-winsupportUpgrade libguestfs-debugsourceUpgrade libguestfs-bash-completionUpgrade nbdkit-plugin-xzUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade supermin-develUpgrade libvirt-daemon-driver-storage-rbdUpgrade lua-guestfsUpgrade libvirtUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade seabiosUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade python3-libvirtUpgrade qemu-kvm-testsUpgrade libguestfs-benchmarkingUpgrade libvirt-lock-sanlock-debuginfoUpgrade libiscsi-develUpgrade ruby-hivex-debuginfoUpgrade perl-hivexUpgrade qemu-kvm-coreUpgrade libvirt-docsUpgrade libguestfs-gobject-debuginfoUpgrade perl-Sys-GuestfsUpgrade hivex-debuginfoUpgrade libvirt-nss-debuginfoUpgrade virt-v2vUpgrade libvirt-daemon-driver-networkUpgrade qemu-imgUpgrade virt-dib-debuginfoUpgrade qemu-kvm-block-rbdUpgrade hivex-develUpgrade nbdkit-bash-completionUpgrade nbdkit-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade libguestfs-java-debuginfoUpgrade virt-dibUpgrade libguestfs-xfsUpgrade libvirt-python-debugsourceUpgrade netcf-debuginfoUpgrade python3-libvirt-debuginfoUpgrade qemu-guest-agentUpgrade nbdkit-plugin-vddkUpgrade ruby-libguestfs-debuginfoUpgrade libguestfs-java-develUpgrade netcfUpgrade sgabiosUpgrade libvirt-adminUpgrade qemu-kvm-block-sshUpgrade qemu-kvm-block-curl-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade python3-libguestfs-debuginfoUpgrade libiscsi-utilsUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-debuginfoUpgrade libguestfs-rsyncUpgrade virt-v2v-debuginfoUpgrade qemu-kvm-debugsourceUpgrade libvirt-daemonUpgrade perl-Sys-VirtUpgrade nbdkit-plugin-python-commonUpgrade qemu-kvm-block-gluster-debuginfoUpgrade qemu-kvm-tests-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade ocaml-hivex-debuginfoUpgrade libguestfs-develUpgrade nbdkit-example-plugins-debuginfoUpgrade libvirt-develUpgrade libguestfs-tools-cUpgrade qemu-kvm-block-curlUpgrade nbdkit-plugin-python3Upgrade nbdkit-example-pluginsUpgrade nbdkitUpgrade ocaml-hivex-develUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libiscsiUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade superminUpgrade nbdkit-plugin-gzipUpgrade libguestfs-benchmarking-debuginfoUpgrade ocaml-libguestfs-develUpgrade libguestfs-javaUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-debugsourceUpgrade libvirt-daemon-debuginfoUpgrade netcf-debugsourceUpgrade libguestfs-man-pages-ukUpgrade python3-hivex-debuginfoUpgrade netcf-libsUpgrade supermin-debugsourceUpgrade libguestfs-toolsUpgrade libvirt-daemon-config-networkUpgrade qemu-kvm-block-iscsiUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libvirt-lock-sanlockUpgrade lua-guestfs-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade libguestfs-man-pages-jaUpgrade sgabios-bin | Aug 7, 2019 | Jun 5, 2019 |
| Rocky_linux | — | Upgrade netcf-debugsourceUpgrade netcf-libsUpgrade libiscsi-utilsUpgrade libiscsiUpgrade libiscsi-debuginfoUpgrade netcfUpgrade libiscsi-utils-debuginfoUpgrade libiscsi-debugsourceUpgrade libiscsi-develUpgrade netcf-develUpgrade netcf-libs-debuginfoUpgrade netcf-debuginfoUpgrade sgabios | Mar 12, 2024 | Jun 5, 2019 |
| Suse | — | Upgrade ntfsprogsUpgrade libntfs-3g87Upgrade libntfs-3g-develUpgrade ntfs-3gUpgrade libntfs-3g84Upgrade ntfsprogs-extra | Apr 24, 2019 | Mar 21, 2019 |
| Ubuntu | — | Upgrade ntfs-3g | Apr 1, 2019 | Mar 21, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub