Описание
Security update for ntfs-3g_ntfsprogs
This update for ntfs-3g_ntfsprogs fixes the following issues:
Security issues fixed:
- CVE-2019-9755: Fixed a heap-based buffer overflow which could lead to local privilege escalation (bsc#1130165).
This update was imported from the SUSE:SLE-12:Update update project.
Список пакетов
openSUSE Leap 42.3
libntfs-3g-devel-2013.1.13-7.6.1
libntfs-3g84-2013.1.13-7.6.1
ntfs-3g-2013.1.13-7.6.1
ntfs-3g_ntfsprogs-2013.1.13-7.6.1
ntfsprogs-2013.1.13-7.6.1
Ссылки
- E-Mail link for openSUSE-SU-2019:1313-1
- SUSE Security Ratings
Описание
An integer underflow issue exists in ntfs-3g 2017.3.23. A local attacker could potentially exploit this by running /bin/ntfs-3g with specially crafted arguments from a specially crafted directory to cause a heap buffer overflow, resulting in a crash or the ability to execute arbitrary code. In installations where /bin/ntfs-3g is a setuid-root binary, this could lead to a local escalation of privileges.
Затронутые продукты
openSUSE Leap 42.3:libntfs-3g-devel-2013.1.13-7.6.1
openSUSE Leap 42.3:libntfs-3g84-2013.1.13-7.6.1
openSUSE Leap 42.3:ntfs-3g-2013.1.13-7.6.1
openSUSE Leap 42.3:ntfs-3g_ntfsprogs-2013.1.13-7.6.1
Ссылки
- CVE-2019-9755
- SUSE Bug 1130165