REDHAT-BUG-1691624: Buffer Overflow

Published Mar 22, 2019

Updated

A heap-based buffer overflow was discovered in NTFS-3G, a read-write NTFS driver for FUSE. A local user can take advantage of this flaw for local root privilege escalation.

Reference: https://security-tracker.debian.org/tracker/source-package/ntfs-3g

Affected Software

1 affected component

tuxera NTFS-3G

Event History

Mar 22, 2019

Data Sourced

via Red Hat·06:27 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1691624?

The severity of REDHAT-BUG-1691624 is high due to the potential for local root privilege escalation.

How do I fix REDHAT-BUG-1691624?

To fix REDHAT-BUG-1691624, users should update the NTFS-3G package to the latest version that contains the security patch.

What is the impact of REDHAT-BUG-1691624?

The impact of REDHAT-BUG-1691624 allows local users to exploit a heap-based buffer overflow, leading to unauthorized access and privilege escalation.

Who is affected by REDHAT-BUG-1691624?

Local users running vulnerable versions of the NTFS-3G driver are affected by REDHAT-BUG-1691624.

Is there a workaround for REDHAT-BUG-1691624?

Currently, the only reliable workaround for REDHAT-BUG-1691624 is to disable the NTFS-3G driver until an update can be applied.