CVE-2019-9755: Integer Underflow
A heap-based buffer overflow was discovered in NTFS-3G, a read-write NTFS driver for FUSE. A local user can take advantage of this flaw for local root privilege escalation.
Reference: https://security-tracker.debian.org/tracker/source-package/ntfs-3g
Other sources
An integer underflow issue exists in ntfs-3g 2017.3.23. A local attacker could potentially exploit this by running /bin/ntfs-3g with specially crafted arguments from a specially crafted directory to cause a heap buffer overflow, resulting in a crash or the ability to execute arbitrary code. In installations where /bin/ntfs-3g is a setuid-root binary, this could lead to a local escalation of privileges.
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2019-9755.
What is the severity of CVE-2019-9755?
The severity of CVE-2019-9755 is low.
How does the vulnerability in ntfs-3g 2017.3.23 occur?
The vulnerability in ntfs-3g 2017.3.23 occurs due to an integer underflow issue.
What can a local attacker potentially do with this vulnerability?
A local attacker could potentially exploit this vulnerability by running /bin/ntfs-3g with specially crafted arguments from a specially crafted directory to cause a heap buffer overflow, resulting in a crash or the ability to execute arbitrary code.
What are the affected software packages?
The affected software packages are libguestfs-winsupport (version 0:7.2-3.el7) and ntfs-3g (versions 1:2017.3.23AR.3-3+deb10u2, 1:2017.3.23AR.3-3+deb10u3, 1:2017.3.23AR.3-4+deb11u3, 1:2022.10.3-1).