vulnerability

Rocky Linux: CVE-2019-9755: virt-rhel (RLSA-2019-3345)

Severity
4
CVSS
(AV:L/AC:M/Au:N/C:P/I:P/A:P)
Published
Jun 5, 2019
Added
Mar 12, 2024
Modified
Aug 13, 2025

Description

An integer underflow issue exists in ntfs-3g 2017.3.23. A local attacker could potentially exploit this by running /bin/ntfs-3g with specially crafted arguments from a specially crafted directory to cause a heap buffer overflow, resulting in a crash or the ability to execute arbitrary code. In installations where /bin/ntfs-3g is a setuid-root binary, this could lead to a local escalation of privileges.

Solutions

rocky-upgrade-libiscsirocky-upgrade-libiscsi-debuginforocky-upgrade-libiscsi-debugsourcerocky-upgrade-libiscsi-develrocky-upgrade-libiscsi-utilsrocky-upgrade-libiscsi-utils-debuginforocky-upgrade-netcfrocky-upgrade-netcf-debuginforocky-upgrade-netcf-debugsourcerocky-upgrade-netcf-develrocky-upgrade-netcf-libsrocky-upgrade-netcf-libs-debuginforocky-upgrade-sgabios
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.