CVE-2019-9755: redhat enterprise_linux Integer Underflow (Wrap or Wraparound)
Vulnerability summary
CVE-2019-9755 is a high (CVSS 7.0) Integer Underflow (Wrap or Wraparound) vulnerability in redhat enterprise_linux. EPSS estimates a 0.53% chance of exploitation in the next 30 days, higher than 44.9% of scored vulnerabilities.
Not severe (CVSS 7, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 6 · Related 4Timeline
- 05-06-2019PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
An integer underflow issue exists in ntfs-3g 2017.3.23. A local attacker could potentially exploit this by running /bin/ntfs-3g with specially crafted arguments from a specially crafted directory to cause a heap buffer overflow, resulting in a crash or the ability to execute arbitrary code. In installations where /bin/ntfs-3g is a setuid-root binary, this could lead to a local escalation of privileges.
CVSS metrics
7 scores · 5 sources · 3 versions- OSV · AlpineEcosystem advisory · calculated7.0HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated7.0HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.0HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated7.0HighCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HDiffers
EPSS trend
Probability
0.53%
Chance of exploitation in the next 30 days
Percentile
45%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.53% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-191Integer Underflow (Wrap or Wraparound)The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.
- CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.
Affected systems
Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Suse7 products
- ntfs-3g_ntfsprogs&distro=SUSE Linux Enterprise Desktop 12 SP3< 2013.1.13-5.6.1
- ntfs-3g_ntfsprogs&distro=SUSE Linux Enterprise Desktop 12 SP4< 2013.1.13-5.6.1
- ntfs-3g_ntfsprogs&distro=SUSE Linux Enterprise Software Development Kit 12 SP3< 2013.1.13-5.6.1
- ntfs-3g_ntfsprogs&distro=SUSE Linux Enterprise Software Development Kit 12 SP4< 2013.1.13-5.6.1
- ntfs-3g_ntfsprogs&distro=SUSE Linux Enterprise Workstation Extension 12 SP3< 2013.1.13-5.6.1
Redhat6 products
- enterprise_linux8.0
- enterprise_linux_eus8.1 | 8.2 | 8.4
- enterprise_linux_server7.0
- enterprise_linux_server_aus8.2 | 8.4
- enterprise_linux_server_tus8.2 | 8.4
Alpine1 product
- ntfs-3g< 2017.3.23-r2
Debian1 product
- ntfs-3g< 1:2017.3.23AR.3-3 | < 1:2016.2.22AR.1+dfsg-1+deb9u1 | < 1:2014.2.15AR.2-1+deb8u4
Opensuse1 product
- ntfs-3g_ntfsprogs&distro=openSUSE Leap 15.0< 2016.2.22-lp150.2.3.1
Tuxera1 product
- ntfs-3g2017.3.23
Ubuntu1 product
- ntfs-3gAll versions (No fix recorded) | < 1:2015.3.14AR.1-1ubuntu0.2 | < 1:2017.3.23-2ubuntu0.18.04.1
7 vendors · 18 products
References
22 links- access.redhat.com/errata/RHSA-2019:2308Vendor AdvisoryX Refsource REDHATAdvisoryThird Party Advisory
Show all 22 references
- lists.opensuse.org/archives/…Advisory