DSA-5160: -1 ntfs-3g -- security update

Published Jun 10, 2022

Updated

ntfs-3g - security update

Other sources

Several vulnerabilities were discovered in NTFS-3G, a read-write NTFS driver for FUSE. A local user can take advantage of these flaws for local root privilege escalation.

Affected Software

2 affected components

debian/ntfs-3g

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ntfs-3g to a version that resolves this vulnerability.
Patch DSA-5160-1

Event History

Jun 10, 2022

Advisory Published

12:00 AM

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

Who is exposed to these vulnerabilities?

Systems using the Debian ntfs-3g package are exposed because the affected component is a read-write NTFS driver for FUSE. The described impact is local root privilege escalation, so the attacker must be a local user.

What level of access does an attacker need?

The advisory describes exploitation by a local user. It does not indicate that remote, unauthenticated exploitation is possible.

DSA-5160: -1 ntfs-3g -- security update

Other sources

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Who is exposed to these vulnerabilities?

What level of access does an attacker need?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to these vulnerabilities?

What level of access does an attacker need?