Skip to content
OpenAdvisories

Package · Debian

ntfs-3g

45 known vulnerabilities.

45 results · Feed

  • Medium 6.7

    A crafted NTFS image can trigger an out-of-bounds access, caused by an unsanitized attribute length in ntfs_inode_looku…

  • Unscored —

    An integer underflow issue exists in ntfs-3g 2017.3.23. A local attacker could potentially exploit this by running /bin…

  • High 7.8
    CVE-2017-0358 Public exploit

    ntfs-3g: Modprobe influence vulnerability via environment variables

    Jann Horn of Google Project Zero discovered that NTFS-3G, a read-write NTFS driver for FUSE, does not scrub the environment before executing modprobe with elevated privileges. A local user can take advantage of this flaw for local root privilege escalation.

  • Unscored —
    CVE-2015-3202 Public exploit

    fusermount in FUSE before 2.9.3-15 does not properly clear the environment before invoking (1) mount or (2) umount as r…

  • Unscored —

    The ntfs-3g package before 1.913-2.fc7 in Fedora 7, and an ntfs-3g package in Ubuntu 7.10/Gutsy, assign incorrect permi…