CVE-2017-0358
13.04.2018, 15:29
Jann Horn of Google Project Zero discovered that NTFS-3G, a read-write NTFS driver for FUSE, does not scrub the environment before executing modprobe with elevated privileges. A local user can take advantage of this flaw for local root privilege escalation.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| tuxera | ntfs-3g | 𝑥 ≤ 2016.2.22 |
| debian | debian_linux | 8.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libntfs-3g84 |
| ||||||||||||||||||||||
| ntfs-3g |
| ||||||||||||||||||||||
| ntfsprogs |
|
Common Weakness Enumeration
References