Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2021:2965-1

Опубликовано: 07 сент. 2021
Источник: suse-cvrf

Описание

Security update for ntfs-3g_ntfsprogs

This update for ntfs-3g_ntfsprogs fixes the following issues:

Update to version 2021.8.22 (bsc#1189720):

  • Signalled support of UTIME_OMIT to external libfuse2
  • Updated the repository change in the README
  • Fixed vulnerability threats caused by maliciously tampered NTFS partitions
  • Security fixes: CVE-2021-33285, CVE-2021-33286, CVE-2021-33287, CVE-2021-33289, CVE-2021-35266, CVE-2021-35267, CVE-2021-35268, CVE-2021-35269, CVE-2021-39251, CVE-2021-39252, CVE-2021-39253, CVE_2021-39254, CVE-2021-39255, CVE-2021-39256, CVE-2021-39257, CVE-2021-39258, CVE-2021-39259, CVE-2021-39260, CVE-2021-39261, CVE-2021-39262, CVE-2021-39263.

Changes in version 2017.3.23:

  • Delegated processing of special reparse points to external plugins
  • Allowed kernel cacheing by lowntfs-3g when not using Posix ACLs
  • Enabled fallback to read-only mount when the volume is hibernated
  • Made a full check for whether an extended attribute is allowed
  • Moved secaudit and usermap to ntfsprogs (now ntfssecaudit and ntfsusermap)
  • Enabled encoding broken UTF-16 into broken UTF-8
  • Autoconfigured selecting <sys/sysmacros.h> vs <sys/mkdev>
  • Allowed using the full library API on systems without extended attributes support
  • Fixed DISABLE_PLUGINS as the condition for not using plugins
  • Corrected validation of multi sector transfer protected records
  • Denied creating/removing files from $Extend
  • Returned the size of locale encoded target as the size of symlinks

Changes in version 2016.2.22:

  • Changes to NTFS-3G driver:

    • Write as much data as possible in compressed attribute pwrite
    • Fixed getting space for making an index non resident
    • Alleviated constraints relative to reparse points
    • Fixed special case of decompressing a runlist
    • Fixed returning the trimming count to fstrim()
    • Fixed the range of valid subauthority counts in a SID
    • Updated the read-only flag even when the security attribute was cached
    • Defended against reusing data from an invalid MFT record
    • Simplified NTFS ACLs when group same as owner and same permission as world
    • Packed/unpacked st_rdev transported as 32-bits on Solaris 64-bits
    • Zero uninitialized bytes before writing compressed data
    • Clear the environment when starting mount or umount
    • Implemented rewinding a directory in lowntfs-3g
    • Use incremental offsets when reading a directory in lowntfs-3g
  • Changes to mkntfs:

    • Make installing mkntfs /sbin symlinks dependent on ENABLE_MOUNT_HELPER
    • Mention the starting sector when it overflows in mkntfs
    • Upgraded the upper-case table to same as Windows 7, 8 and 10
  • Changes to ntfsresize:

    • Fixed relocating the MFT runlists
    • Decode the full list of bad clusters
    • Fixed resizing an extended bad cluster list
  • Changes to ntfsclone:

    • Decoded the full list of bad clusters
  • Changes to ntfsinfo:

    • Displayed reparse point information
  • Changes to ntfsdecrypt:

    • Fixed DESX decryption
  • Changes to ntfswipe:

    • Added clarifications about several options to the manual
  • New ntfsprogs tool:

    • Included ntfsrecover to recover the updates committed by Windows (experimental)
  • Overall:

    • Made a general cleanup of endianness types for easier checks

Changes in version 2015.3.14:

  • ntfs-3g: Fixed inserting a new ACL after wiping out by chkdsk
  • ntfs-3g: Fixed Windows-type inheritance
  • ntfs-3g: Fixed ignoring the umask mount option when permissions are used
  • ntfs-3g: Fixed checking permissions when Posix ACLs are compiled in but not enabled
  • ntfs-3g: Disabled option remove_hiberfile on read-only mounts
  • ntfs-3g: Implemented an extended attribute to get/set EAs
  • ntfs-3g: Avoid full runlist updating in more situations
  • ntfs-3g: Update ctime after setting an ACL
  • ntfs-3g: Use MFT record 15 for the first extent to MFT:DATA
  • ntfs-3g: Ignore the sloppy mount option (-s)
  • ntfs-3g: Implemented FITRIM (fstrim) ioctl
  • ntfs-3g: Reengineered the compression algorithm
  • ntfsprogs: Added manuals for ntfsdecrypt, ntfswipe, ntfstruncate and ntfsfallocate

Список пакетов

SUSE Linux Enterprise Software Development Kit 12 SP5
libntfs-3g-devel-2021.8.22-5.9.1
libntfs-3g84-2021.8.22-5.9.1
SUSE Linux Enterprise Workstation Extension 12 SP5
libntfs-3g84-2021.8.22-5.9.1
ntfs-3g-2021.8.22-5.9.1
ntfsprogs-2021.8.22-5.9.1

Ссылки

Описание

Jann Horn of Google Project Zero discovered that NTFS-3G, a read-write NTFS driver for FUSE, does not scrub the environment before executing modprobe with elevated privileges. A local user can take advantage of this flaw for local root privilege escalation.


Затронутые продукты
SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g-devel-2021.8.22-5.9.1
SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g84-2021.8.22-5.9.1
SUSE Linux Enterprise Workstation Extension 12 SP5:libntfs-3g84-2021.8.22-5.9.1
SUSE Linux Enterprise Workstation Extension 12 SP5:ntfs-3g-2021.8.22-5.9.1

Ссылки

Описание

An integer underflow issue exists in ntfs-3g 2017.3.23. A local attacker could potentially exploit this by running /bin/ntfs-3g with specially crafted arguments from a specially crafted directory to cause a heap buffer overflow, resulting in a crash or the ability to execute arbitrary code. In installations where /bin/ntfs-3g is a setuid-root binary, this could lead to a local escalation of privileges.


Затронутые продукты
SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g-devel-2021.8.22-5.9.1
SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g84-2021.8.22-5.9.1
SUSE Linux Enterprise Workstation Extension 12 SP5:libntfs-3g84-2021.8.22-5.9.1
SUSE Linux Enterprise Workstation Extension 12 SP5:ntfs-3g-2021.8.22-5.9.1

Ссылки

Описание

In NTFS-3G versions < 2021.8.22, when a specially crafted NTFS attribute is supplied to the function ntfs_get_attribute_value, a heap buffer overflow can occur allowing for memory disclosure or denial of service. The vulnerability is caused by an out-of-bound buffer access which can be triggered by mounting a crafted ntfs partition. The root cause is a missing consistency check after reading an MFT record : the "bytes_in_use" field should be less than the "bytes_allocated" field. When it is not, the parsing of the records proceeds into the wild.


Затронутые продукты
SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g-devel-2021.8.22-5.9.1
SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g84-2021.8.22-5.9.1
SUSE Linux Enterprise Workstation Extension 12 SP5:libntfs-3g84-2021.8.22-5.9.1
SUSE Linux Enterprise Workstation Extension 12 SP5:ntfs-3g-2021.8.22-5.9.1

Ссылки

Описание

In NTFS-3G versions < 2021.8.22, when a specially crafted unicode string is supplied in an NTFS image a heap buffer overflow can occur and allow for code execution.


Затронутые продукты
SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g-devel-2021.8.22-5.9.1
SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g84-2021.8.22-5.9.1
SUSE Linux Enterprise Workstation Extension 12 SP5:libntfs-3g84-2021.8.22-5.9.1
SUSE Linux Enterprise Workstation Extension 12 SP5:ntfs-3g-2021.8.22-5.9.1

Ссылки

Описание

In NTFS-3G versions < 2021.8.22, when specially crafted NTFS attributes are read in the function ntfs_attr_pread_i, a heap buffer overflow can occur and allow for writing to arbitrary memory or denial of service of the application.


Затронутые продукты
SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g-devel-2021.8.22-5.9.1
SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g84-2021.8.22-5.9.1
SUSE Linux Enterprise Workstation Extension 12 SP5:libntfs-3g84-2021.8.22-5.9.1
SUSE Linux Enterprise Workstation Extension 12 SP5:ntfs-3g-2021.8.22-5.9.1

Ссылки

Описание

In NTFS-3G versions < 2021.8.22, when a specially crafted MFT section is supplied in an NTFS image a heap buffer overflow can occur and allow for code execution.


Затронутые продукты
SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g-devel-2021.8.22-5.9.1
SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g84-2021.8.22-5.9.1
SUSE Linux Enterprise Workstation Extension 12 SP5:libntfs-3g84-2021.8.22-5.9.1
SUSE Linux Enterprise Workstation Extension 12 SP5:ntfs-3g-2021.8.22-5.9.1

Ссылки

Описание

In NTFS-3G versions < 2021.8.22, when a specially crafted NTFS inode pathname is supplied in an NTFS image a heap buffer overflow can occur resulting in memory disclosure, denial of service and even code execution.


Затронутые продукты
SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g-devel-2021.8.22-5.9.1
SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g84-2021.8.22-5.9.1
SUSE Linux Enterprise Workstation Extension 12 SP5:libntfs-3g84-2021.8.22-5.9.1
SUSE Linux Enterprise Workstation Extension 12 SP5:ntfs-3g-2021.8.22-5.9.1

Ссылки

Описание

NTFS-3G versions < 2021.8.22, a stack buffer overflow can occur when correcting differences in the MFT and MFTMirror allowing for code execution or escalation of privileges when setuid-root.


Затронутые продукты
SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g-devel-2021.8.22-5.9.1
SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g84-2021.8.22-5.9.1
SUSE Linux Enterprise Workstation Extension 12 SP5:libntfs-3g84-2021.8.22-5.9.1
SUSE Linux Enterprise Workstation Extension 12 SP5:ntfs-3g-2021.8.22-5.9.1

Ссылки

Описание

In NTFS-3G versions < 2021.8.22, when a specially crafted NTFS inode is loaded in the function ntfs_inode_real_open, a heap buffer overflow can occur allowing for code execution and escalation of privileges.


Затронутые продукты
SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g-devel-2021.8.22-5.9.1
SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g84-2021.8.22-5.9.1
SUSE Linux Enterprise Workstation Extension 12 SP5:libntfs-3g84-2021.8.22-5.9.1
SUSE Linux Enterprise Workstation Extension 12 SP5:ntfs-3g-2021.8.22-5.9.1

Ссылки

Описание

NTFS-3G versions < 2021.8.22, when a specially crafted NTFS attribute from the MFT is setup in the function ntfs_attr_setup_flag, a heap buffer overflow can occur allowing for code execution and escalation of privileges.


Затронутые продукты
SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g-devel-2021.8.22-5.9.1
SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g84-2021.8.22-5.9.1
SUSE Linux Enterprise Workstation Extension 12 SP5:libntfs-3g84-2021.8.22-5.9.1
SUSE Linux Enterprise Workstation Extension 12 SP5:ntfs-3g-2021.8.22-5.9.1

Ссылки

Описание

A crafted NTFS image can cause a NULL pointer dereference in ntfs_extent_inode_open in NTFS-3G < 2021.8.22.


Затронутые продукты
SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g-devel-2021.8.22-5.9.1
SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g84-2021.8.22-5.9.1
SUSE Linux Enterprise Workstation Extension 12 SP5:libntfs-3g84-2021.8.22-5.9.1
SUSE Linux Enterprise Workstation Extension 12 SP5:ntfs-3g-2021.8.22-5.9.1

Ссылки

Описание

A crafted NTFS image can cause an out-of-bounds read in ntfs_ie_lookup in NTFS-3G < 2021.8.22.


Затронутые продукты
SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g-devel-2021.8.22-5.9.1
SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g84-2021.8.22-5.9.1
SUSE Linux Enterprise Workstation Extension 12 SP5:libntfs-3g84-2021.8.22-5.9.1
SUSE Linux Enterprise Workstation Extension 12 SP5:ntfs-3g-2021.8.22-5.9.1

Ссылки

Описание

A crafted NTFS image can cause an out-of-bounds read in ntfs_runlists_merge_i in NTFS-3G < 2021.8.22.


Затронутые продукты
SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g-devel-2021.8.22-5.9.1
SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g84-2021.8.22-5.9.1
SUSE Linux Enterprise Workstation Extension 12 SP5:libntfs-3g84-2021.8.22-5.9.1
SUSE Linux Enterprise Workstation Extension 12 SP5:ntfs-3g-2021.8.22-5.9.1

Ссылки

Описание

A crafted NTFS image can trigger an out-of-bounds read, caused by an invalid attribute in ntfs_attr_find_in_attrdef, in NTFS-3G < 2021.8.22.


Затронутые продукты
SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g-devel-2021.8.22-5.9.1
SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g84-2021.8.22-5.9.1
SUSE Linux Enterprise Workstation Extension 12 SP5:libntfs-3g84-2021.8.22-5.9.1
SUSE Linux Enterprise Workstation Extension 12 SP5:ntfs-3g-2021.8.22-5.9.1

Ссылки

Описание

A crafted NTFS image can cause a heap-based buffer overflow in ntfs_inode_lookup_by_name in NTFS-3G < 2021.8.22.


Затронутые продукты
SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g-devel-2021.8.22-5.9.1
SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g84-2021.8.22-5.9.1
SUSE Linux Enterprise Workstation Extension 12 SP5:libntfs-3g84-2021.8.22-5.9.1
SUSE Linux Enterprise Workstation Extension 12 SP5:ntfs-3g-2021.8.22-5.9.1

Ссылки

Описание

A crafted NTFS image with an unallocated bitmap can lead to a endless recursive function call chain (starting from ntfs_attr_pwrite), causing stack consumption in NTFS-3G < 2021.8.22.


Затронутые продукты
SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g-devel-2021.8.22-5.9.1
SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g84-2021.8.22-5.9.1
SUSE Linux Enterprise Workstation Extension 12 SP5:libntfs-3g84-2021.8.22-5.9.1
SUSE Linux Enterprise Workstation Extension 12 SP5:ntfs-3g-2021.8.22-5.9.1

Ссылки

Описание

A crafted NTFS image can cause out-of-bounds reads in ntfs_attr_find and ntfs_external_attr_find in NTFS-3G < 2021.8.22.


Затронутые продукты
SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g-devel-2021.8.22-5.9.1
SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g84-2021.8.22-5.9.1
SUSE Linux Enterprise Workstation Extension 12 SP5:libntfs-3g84-2021.8.22-5.9.1
SUSE Linux Enterprise Workstation Extension 12 SP5:ntfs-3g-2021.8.22-5.9.1

Ссылки

Описание

A crafted NTFS image can trigger an out-of-bounds access, caused by an unsanitized attribute length in ntfs_inode_lookup_by_name, in NTFS-3G < 2021.8.22.


Затронутые продукты
SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g-devel-2021.8.22-5.9.1
SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g84-2021.8.22-5.9.1
SUSE Linux Enterprise Workstation Extension 12 SP5:libntfs-3g84-2021.8.22-5.9.1
SUSE Linux Enterprise Workstation Extension 12 SP5:ntfs-3g-2021.8.22-5.9.1

Ссылки

Описание

A crafted NTFS image can cause an out-of-bounds access in ntfs_inode_sync_standard_information in NTFS-3G < 2021.8.22.


Затронутые продукты
SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g-devel-2021.8.22-5.9.1
SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g84-2021.8.22-5.9.1
SUSE Linux Enterprise Workstation Extension 12 SP5:libntfs-3g84-2021.8.22-5.9.1
SUSE Linux Enterprise Workstation Extension 12 SP5:ntfs-3g-2021.8.22-5.9.1

Ссылки

Описание

A crafted NTFS image can cause a heap-based buffer overflow in ntfs_compressed_pwrite in NTFS-3G < 2021.8.22.


Затронутые продукты
SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g-devel-2021.8.22-5.9.1
SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g84-2021.8.22-5.9.1
SUSE Linux Enterprise Workstation Extension 12 SP5:libntfs-3g84-2021.8.22-5.9.1
SUSE Linux Enterprise Workstation Extension 12 SP5:ntfs-3g-2021.8.22-5.9.1

Ссылки

Описание

A crafted NTFS image can cause an out-of-bounds access in ntfs_decompress in NTFS-3G < 2021.8.22.


Затронутые продукты
SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g-devel-2021.8.22-5.9.1
SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g84-2021.8.22-5.9.1
SUSE Linux Enterprise Workstation Extension 12 SP5:libntfs-3g84-2021.8.22-5.9.1
SUSE Linux Enterprise Workstation Extension 12 SP5:ntfs-3g-2021.8.22-5.9.1

Ссылки

Описание

A crafted NTFS image can trigger a heap-based buffer overflow, caused by an unsanitized attribute in ntfs_get_attribute_value, in NTFS-3G < 2021.8.22.


Затронутые продукты
SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g-devel-2021.8.22-5.9.1
SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g84-2021.8.22-5.9.1
SUSE Linux Enterprise Workstation Extension 12 SP5:libntfs-3g84-2021.8.22-5.9.1
SUSE Linux Enterprise Workstation Extension 12 SP5:ntfs-3g-2021.8.22-5.9.1

Ссылки
Уязвимость SUSE-SU-2021:2965-1