Summary
USN-5711-1 fixed a vulnerability in NTFS-3G. This update provides
the corresponding update for Ubuntu 14.04 ESM Ubuntu 16.04 ESM.
Original advisory details:
Yuchen Zeng and Eduardo Vela discovered that NTFS-3G incorrectly validated
certain NTFS metadata. A local attacker could possibly use this issue to
gain privileges.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | ntfs-3g | 1:2013.1.13AR.1-2ubuntu2+esm4 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | ntfs-3g | 1:2015.3.14AR.1-1ubuntu0.3+esm4 |
Vulnerabilities 1
-
High 7.8
A buffer overflow was discovered in NTFS-3G before 2022.10.3. Crafted metadata in an NTFS image can cause code executio…
References
-
report
https://ubuntu.com/security/CVE-2022-40284