Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2019:1314-1

Опубликовано: 02 мая 2019
Источник: suse-cvrf

Описание

Security update for ntfs-3g_ntfsprogs

This update for ntfs-3g_ntfsprogs fixes the following issues:

Security issues fixed:

  • CVE-2019-9755: Fixed a heap-based buffer overflow which could lead to local privilege escalation (bsc#1130165).

This update was imported from the SUSE:SLE-15:Update update project.

Список пакетов

openSUSE Leap 15.0
libntfs-3g-devel-2016.2.22-lp150.2.3.1
libntfs-3g87-2016.2.22-lp150.2.3.1
ntfs-3g-2016.2.22-lp150.2.3.1
ntfsprogs-2016.2.22-lp150.2.3.1
ntfsprogs-extra-2016.2.22-lp150.2.3.1

Ссылки

Описание

An integer underflow issue exists in ntfs-3g 2017.3.23. A local attacker could potentially exploit this by running /bin/ntfs-3g with specially crafted arguments from a specially crafted directory to cause a heap buffer overflow, resulting in a crash or the ability to execute arbitrary code. In installations where /bin/ntfs-3g is a setuid-root binary, this could lead to a local escalation of privileges.

Затронутые продукты
openSUSE Leap 15.0:libntfs-3g-devel-2016.2.22-lp150.2.3.1
openSUSE Leap 15.0:libntfs-3g87-2016.2.22-lp150.2.3.1
openSUSE Leap 15.0:ntfs-3g-2016.2.22-lp150.2.3.1
openSUSE Leap 15.0:ntfsprogs-2016.2.22-lp150.2.3.1
Ссылки
Уязвимость openSUSE-SU-2019:1314-1