Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2018:3587-2

Опубликовано: 13 дек. 2018
Источник: suse-cvrf

Описание

Security update for ntfs-3g_ntfsprogs

This update for ntfs-3g_ntfsprogs fixes the following issues:

  • CVE-2017-0358: Missing sanitization of the environment during a call to modprobe allowed local users to escalate fo root privilege (bsc#1022500)

Список пакетов

SUSE Linux Enterprise Desktop 12 SP4
libntfs-3g84-2013.1.13-5.3.1
ntfs-3g-2013.1.13-5.3.1
ntfsprogs-2013.1.13-5.3.1
SUSE Linux Enterprise Software Development Kit 12 SP4
libntfs-3g-devel-2013.1.13-5.3.1
libntfs-3g84-2013.1.13-5.3.1
SUSE Linux Enterprise Workstation Extension 12 SP4
libntfs-3g84-2013.1.13-5.3.1
ntfs-3g-2013.1.13-5.3.1
ntfsprogs-2013.1.13-5.3.1

Ссылки

Описание

Jann Horn of Google Project Zero discovered that NTFS-3G, a read-write NTFS driver for FUSE, does not scrub the environment before executing modprobe with elevated privileges. A local user can take advantage of this flaw for local root privilege escalation.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP4:libntfs-3g84-2013.1.13-5.3.1
SUSE Linux Enterprise Desktop 12 SP4:ntfs-3g-2013.1.13-5.3.1
SUSE Linux Enterprise Desktop 12 SP4:ntfsprogs-2013.1.13-5.3.1
SUSE Linux Enterprise Software Development Kit 12 SP4:libntfs-3g-devel-2013.1.13-5.3.1
Ссылки