CVE-2019-9755 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2019-9755 Interim 1 33 2023-09-13T00:08:02Z current 2021-05-30T14:26:01Z 2023-09-13T00:08:02Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2019-9755 An integer underflow issue exists in ntfs-3g 2017.3.23. A local attacker could potentially exploit this by running /bin/ntfs-3g with specially crafted arguments from a specially crafted directory to cause a heap buffer overflow, resulting in a crash or the ability to execute arbitrary code. In installations where /bin/ntfs-3g is a setuid-root binary, this could lead to a local escalation of privileges. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2019-April/005359.html E-Mail link for SUSE-SU-2019:1000-1 https://lists.suse.com/pipermail/sle-security-updates/2019-April/005357.html E-Mail link for SUSE-SU-2019:1001-1 https://lists.suse.com/pipermail/sle-security-updates/2021-September/009419.html E-Mail link for SUSE-SU-2021:2965-1 https://lists.suse.com/pipermail/sle-security-updates/2021-September/009416.html E-Mail link for SUSE-SU-2021:2971-1 https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00002.html E-Mail link for openSUSE-SU-2019:1313-1 https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00001.html E-Mail link for openSUSE-SU-2019:1314-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6I22R7EMWP6WBQIXDCKB4KJMMB67TMZK/ E-Mail link for openSUSE-SU-2021:1244-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/APJMFOEFTZSFEAKDMRWUM25JNERJUHUT/ E-Mail link for openSUSE-SU-2021:2971-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SP4 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE Linux Enterprise Workstation Extension 15 SP2 SUSE Linux Enterprise Workstation Extension 15 SP3 SUSE Linux Enterprise Workstation Extension 15 SP4 SUSE Linux Enterprise Workstation Extension 15 SP5 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Workstation Extension 12 SP5 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE Linux Enterprise Workstation Extension 15 SP2 SUSE Linux Enterprise Workstation Extension 15 SP3 SUSE Linux Enterprise Workstation Extension 15 SP4 SUSE Linux Enterprise Workstation Extension 15 SP5 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Workstation Extension 12 SP5 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE Linux Enterprise Workstation Extension 15 SP2 SUSE Linux Enterprise Workstation Extension 15 SP3 SUSE Linux Enterprise Workstation Extension 15 SP4 SUSE Linux Enterprise Workstation Extension 15 SP5 openSUSE Leap 15.0 openSUSE Leap 15.2 openSUSE Leap 15.3 openSUSE Leap 15.4 libntfs-3g-devel-2013.1.13-5.6.1 libntfs-3g-devel-2016.2.22-3.3.2 libntfs-3g-devel-2016.2.22-lp150.2.3.1 libntfs-3g-devel-2021.8.22-3.8.1 libntfs-3g-devel-2021.8.22-lp152.5.3.1 libntfs-3g84 libntfs-3g84-2013.1.13-5.6.1 libntfs-3g87-2016.2.22-3.3.2 libntfs-3g87-2016.2.22-3.5.1 libntfs-3g87-2016.2.22-lp150.2.3.1 libntfs-3g87-2016.2.22-lp152.4.7 libntfs-3g87-2021.8.22-3.8.1 ntfs-3g ntfs-3g-2013.1.13-5.6.1 ntfs-3g-2016.2.22-3.3.2 ntfs-3g-2016.2.22-3.5.1 ntfs-3g-2016.2.22-lp150.2.3.1 ntfs-3g-2016.2.22-lp152.4.7 ntfs-3g-2021.8.22-3.8.1 ntfs-3g_ntfsprogs ntfsprogs ntfsprogs-2013.1.13-5.6.1 ntfsprogs-2016.2.22-3.3.2 ntfsprogs-2016.2.22-3.5.1 ntfsprogs-2016.2.22-lp150.2.3.1 ntfsprogs-2016.2.22-lp152.4.7 ntfsprogs-2021.8.22-3.8.1 ntfsprogs-extra-2016.2.22-lp150.2.3.1 ntfsprogs-extra-2021.8.22-3.8.1 ntfsprogs-extra-2021.8.22-lp152.5.3.1 libntfs-3g84-2013.1.13-5.6.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 ntfs-3g-2013.1.13-5.6.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 ntfsprogs-2013.1.13-5.6.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libntfs-3g84-2013.1.13-5.6.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 ntfs-3g-2013.1.13-5.6.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 ntfsprogs-2013.1.13-5.6.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libntfs-3g-devel-2013.1.13-5.6.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libntfs-3g84-2013.1.13-5.6.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libntfs-3g-devel-2013.1.13-5.6.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 libntfs-3g84-2013.1.13-5.6.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 libntfs-3g-devel-2013.1.13-5.6.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libntfs-3g84-2013.1.13-5.6.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libntfs-3g84-2013.1.13-5.6.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP3 ntfs-3g-2013.1.13-5.6.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP3 ntfsprogs-2013.1.13-5.6.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP3 libntfs-3g84-2013.1.13-5.6.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP4 ntfs-3g-2013.1.13-5.6.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP4 ntfsprogs-2013.1.13-5.6.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP4 libntfs-3g84-2013.1.13-5.6.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 ntfs-3g-2013.1.13-5.6.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 ntfsprogs-2013.1.13-5.6.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 libntfs-3g87-2016.2.22-3.3.2 as a component of SUSE Linux Enterprise Workstation Extension 15 ntfs-3g-2016.2.22-3.3.2 as a component of SUSE Linux Enterprise Workstation Extension 15 ntfsprogs-2016.2.22-3.3.2 as a component of SUSE Linux Enterprise Workstation Extension 15 libntfs-3g87-2016.2.22-3.3.2 as a component of SUSE Linux Enterprise Workstation Extension 15 SP1 ntfs-3g-2016.2.22-3.3.2 as a component of SUSE Linux Enterprise Workstation Extension 15 SP1 ntfsprogs-2016.2.22-3.3.2 as a component of SUSE Linux Enterprise Workstation Extension 15 SP1 libntfs-3g-devel-2016.2.22-3.3.2 as a component of SUSE Linux Enterprise Workstation Extension 15 SP2 libntfs-3g87-2016.2.22-3.3.2 as a component of SUSE Linux Enterprise Workstation Extension 15 SP2 ntfs-3g-2016.2.22-3.3.2 as a component of SUSE Linux Enterprise Workstation Extension 15 SP2 ntfsprogs-2016.2.22-3.3.2 as a component of SUSE Linux Enterprise Workstation Extension 15 SP2 libntfs-3g-devel-2016.2.22-3.3.2 as a component of SUSE Linux Enterprise Workstation Extension 15 SP3 libntfs-3g87-2016.2.22-3.3.2 as a component of SUSE Linux Enterprise Workstation Extension 15 SP3 ntfs-3g-2016.2.22-3.3.2 as a component of SUSE Linux Enterprise Workstation Extension 15 SP3 ntfsprogs-2016.2.22-3.3.2 as a component of SUSE Linux Enterprise Workstation Extension 15 SP3 libntfs-3g-devel-2021.8.22-3.8.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP4 libntfs-3g87-2021.8.22-3.8.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP4 ntfs-3g-2021.8.22-3.8.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP4 ntfsprogs-2021.8.22-3.8.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP4 libntfs-3g-devel-2021.8.22-3.8.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP5 libntfs-3g87-2021.8.22-3.8.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP5 ntfs-3g-2021.8.22-3.8.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP5 ntfsprogs-2021.8.22-3.8.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP5 libntfs-3g-devel-2016.2.22-lp150.2.3.1 as a component of openSUSE Leap 15.0 libntfs-3g87-2016.2.22-lp150.2.3.1 as a component of openSUSE Leap 15.0 ntfs-3g-2016.2.22-lp150.2.3.1 as a component of openSUSE Leap 15.0 ntfsprogs-2016.2.22-lp150.2.3.1 as a component of openSUSE Leap 15.0 ntfsprogs-extra-2016.2.22-lp150.2.3.1 as a component of openSUSE Leap 15.0 libntfs-3g-devel-2021.8.22-lp152.5.3.1 as a component of openSUSE Leap 15.2 libntfs-3g87-2016.2.22-lp152.4.7 as a component of openSUSE Leap 15.2 ntfs-3g-2016.2.22-lp152.4.7 as a component of openSUSE Leap 15.2 ntfsprogs-2016.2.22-lp152.4.7 as a component of openSUSE Leap 15.2 ntfsprogs-extra-2021.8.22-lp152.5.3.1 as a component of openSUSE Leap 15.2 libntfs-3g-devel-2021.8.22-3.8.1 as a component of openSUSE Leap 15.3 libntfs-3g87-2016.2.22-3.5.1 as a component of openSUSE Leap 15.3 ntfs-3g-2016.2.22-3.5.1 as a component of openSUSE Leap 15.3 ntfsprogs-2016.2.22-3.5.1 as a component of openSUSE Leap 15.3 ntfsprogs-extra-2021.8.22-3.8.1 as a component of openSUSE Leap 15.3 libntfs-3g87-2021.8.22-3.8.1 as a component of openSUSE Leap 15.4 ntfs-3g-2021.8.22-3.8.1 as a component of openSUSE Leap 15.4 ntfsprogs-2021.8.22-3.8.1 as a component of openSUSE Leap 15.4 libntfs-3g84 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 ntfs-3g as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 ntfsprogs as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 ntfs-3g_ntfsprogs as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 An integer underflow issue exists in ntfs-3g 2017.3.23. A local attacker could potentially exploit this by running /bin/ntfs-3g with specially crafted arguments from a specially crafted directory to cause a heap buffer overflow, resulting in a crash or the ability to execute arbitrary code. In installations where /bin/ntfs-3g is a setuid-root binary, this could lead to a local escalation of privileges. CVE-2019-9755 SUSE Linux Enterprise Desktop 12 SP3:libntfs-3g84-2013.1.13-5.6.1 SUSE Linux Enterprise Desktop 12 SP3:ntfs-3g-2013.1.13-5.6.1 SUSE Linux Enterprise Desktop 12 SP3:ntfsprogs-2013.1.13-5.6.1 SUSE Linux Enterprise Desktop 12 SP4:libntfs-3g84-2013.1.13-5.6.1 SUSE Linux Enterprise Desktop 12 SP4:ntfs-3g-2013.1.13-5.6.1 SUSE Linux Enterprise Desktop 12 SP4:ntfsprogs-2013.1.13-5.6.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1:libntfs-3g-devel-2016.2.22-3.3.2 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1:ntfsprogs-extra-2016.2.22-3.3.2 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2:ntfsprogs-extra-2016.2.22-3.3.2 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP3:ntfsprogs-extra-2016.2.22-3.3.2 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP4:ntfsprogs-extra-2021.8.22-3.8.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP5:ntfsprogs-extra-2021.8.22-3.8.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libntfs-3g-devel-2013.1.13-5.6.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libntfs-3g84-2013.1.13-5.6.1 SUSE Linux Enterprise Software Development Kit 12 SP4:libntfs-3g-devel-2013.1.13-5.6.1 SUSE Linux Enterprise Software Development Kit 12 SP4:libntfs-3g84-2013.1.13-5.6.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g-devel-2013.1.13-5.6.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libntfs-3g84-2013.1.13-5.6.1 SUSE Linux Enterprise Workstation Extension 12 SP3:libntfs-3g84-2013.1.13-5.6.1 SUSE Linux Enterprise Workstation Extension 12 SP3:ntfs-3g-2013.1.13-5.6.1 SUSE Linux Enterprise Workstation Extension 12 SP3:ntfsprogs-2013.1.13-5.6.1 SUSE Linux Enterprise Workstation Extension 12 SP4:libntfs-3g84-2013.1.13-5.6.1 SUSE Linux Enterprise Workstation Extension 12 SP4:ntfs-3g-2013.1.13-5.6.1 SUSE Linux Enterprise Workstation Extension 12 SP4:ntfsprogs-2013.1.13-5.6.1 SUSE Linux Enterprise Workstation Extension 12 SP5:libntfs-3g84-2013.1.13-5.6.1 SUSE Linux Enterprise Workstation Extension 12 SP5:ntfs-3g-2013.1.13-5.6.1 SUSE Linux Enterprise Workstation Extension 12 SP5:ntfsprogs-2013.1.13-5.6.1 SUSE Linux Enterprise Workstation Extension 15:libntfs-3g87-2016.2.22-3.3.2 SUSE Linux Enterprise Workstation Extension 15:ntfs-3g-2016.2.22-3.3.2 SUSE Linux Enterprise Workstation Extension 15:ntfsprogs-2016.2.22-3.3.2 SUSE Linux Enterprise Workstation Extension 15 SP1:libntfs-3g87-2016.2.22-3.3.2 SUSE Linux Enterprise Workstation Extension 15 SP1:ntfs-3g-2016.2.22-3.3.2 SUSE Linux Enterprise Workstation Extension 15 SP1:ntfsprogs-2016.2.22-3.3.2 SUSE Linux Enterprise Workstation Extension 15 SP2:libntfs-3g-devel-2016.2.22-3.3.2 SUSE Linux Enterprise Workstation Extension 15 SP2:libntfs-3g87-2016.2.22-3.3.2 SUSE Linux Enterprise Workstation Extension 15 SP2:ntfs-3g-2016.2.22-3.3.2 SUSE Linux Enterprise Workstation Extension 15 SP2:ntfsprogs-2016.2.22-3.3.2 SUSE Linux Enterprise Workstation Extension 15 SP3:libntfs-3g-devel-2016.2.22-3.3.2 SUSE Linux Enterprise Workstation Extension 15 SP3:libntfs-3g87-2016.2.22-3.3.2 SUSE Linux Enterprise Workstation Extension 15 SP3:ntfs-3g-2016.2.22-3.3.2 SUSE Linux Enterprise Workstation Extension 15 SP3:ntfsprogs-2016.2.22-3.3.2 SUSE Linux Enterprise Workstation Extension 15 SP4:libntfs-3g-devel-2021.8.22-3.8.1 SUSE Linux Enterprise Workstation Extension 15 SP4:libntfs-3g87-2021.8.22-3.8.1 SUSE Linux Enterprise Workstation Extension 15 SP4:ntfs-3g-2021.8.22-3.8.1 SUSE Linux Enterprise Workstation Extension 15 SP4:ntfsprogs-2021.8.22-3.8.1 SUSE Linux Enterprise Workstation Extension 15 SP5:libntfs-3g-devel-2021.8.22-3.8.1 SUSE Linux Enterprise Workstation Extension 15 SP5:libntfs-3g87-2021.8.22-3.8.1 SUSE Linux Enterprise Workstation Extension 15 SP5:ntfs-3g-2021.8.22-3.8.1 SUSE Linux Enterprise Workstation Extension 15 SP5:ntfsprogs-2021.8.22-3.8.1 openSUSE Leap 15.0:libntfs-3g-devel-2016.2.22-lp150.2.3.1 openSUSE Leap 15.0:libntfs-3g87-2016.2.22-lp150.2.3.1 openSUSE Leap 15.0:ntfs-3g-2016.2.22-lp150.2.3.1 openSUSE Leap 15.0:ntfsprogs-2016.2.22-lp150.2.3.1 openSUSE Leap 15.0:ntfsprogs-extra-2016.2.22-lp150.2.3.1 openSUSE Leap 15.2:libntfs-3g-devel-2021.8.22-lp152.5.3.1 openSUSE Leap 15.2:libntfs-3g87-2016.2.22-lp152.4.7 openSUSE Leap 15.2:ntfs-3g-2016.2.22-lp152.4.7 openSUSE Leap 15.2:ntfsprogs-2016.2.22-lp152.4.7 openSUSE Leap 15.2:ntfsprogs-extra-2021.8.22-lp152.5.3.1 openSUSE Leap 15.3:libntfs-3g-devel-2021.8.22-3.8.1 openSUSE Leap 15.3:libntfs-3g87-2016.2.22-3.5.1 openSUSE Leap 15.3:ntfs-3g-2016.2.22-3.5.1 openSUSE Leap 15.3:ntfsprogs-2016.2.22-3.5.1 openSUSE Leap 15.3:ntfsprogs-extra-2021.8.22-3.8.1 openSUSE Leap 15.4:libntfs-3g87-2021.8.22-3.8.1 openSUSE Leap 15.4:ntfs-3g-2021.8.22-3.8.1 openSUSE Leap 15.4:ntfsprogs-2021.8.22-3.8.1 SUSE Linux Enterprise Workstation Extension 12 SP5:libntfs-3g84 SUSE Linux Enterprise Workstation Extension 12 SP5:ntfs-3g SUSE Linux Enterprise Workstation Extension 12 SP5:ntfs-3g_ntfsprogs SUSE Linux Enterprise Workstation Extension 12 SP5:ntfsprogs moderate 4.4 AV:L/AC:M/Au:N/C:P/I:P/A:P 5.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H