Tuxera Ntfs 3G vulnerabilities, page 3
42 vulnerabilities
Known vulnerabilities in Tuxera Ntfs 3G, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
RoutineCVE-2019-9755redhat · enterprise_linux +17 moreredhat enterprise_linuxAn integer underflow issue exists in ntfs-3g 2017.3.23. A local attacker could potentially exploit this by running /bin/ntfs-3g with specially crafted arguments from a specially crafted directory to cause a heap buffer overflow, resulting in a crash or the ability to execute arbitrary code. In installations where /bin/ntfs-3g is a setuid-root binary, this could lead to a local escalation of privileges.CVSS7.0HighEPSS0.53%PrioritiseCVE-2017-0358ntfs-3g +11 morentfs-3g: Modprobe influence vulnerability via environment variablesJann Horn of Google Project Zero discovered that NTFS-3G, a read-write NTFS driver for FUSE, does not scrub the environment before executing modprobe with elevated privileges. A local user can take advantage of this flaw for local root privilege escalation.CVSS7.8HighEPSS2.19%