Lucene search
Veracode Vulnerability DatabaseVERACODE:21154HistoryAug 08, 2019 - 12:08 a.m.
Buffer Overflows And Privilege Escalation
2019-08-0800:08:45
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
21
0.0004 Low
EPSS
Percentile
5.1%
libguestfs-winsupport is vulnerable to heap-based buffer overflow. An attacker can run /bin/ntfs-3g with a malicious file, even causing local access escalation attack if the /bin/ntfs-3g is a setuid-root binary.
| CPE | Name | Operator | Version |
|---|---|---|---|
| libguestfs-winsupport | eq | 7.1__4.el7 | |
| ntfs-3g:edge | eq | 2017.3.23-r1 | |
| libguestfs-winsupport | eq | 7.1__4.el7 | |
| ntfs-3g:edge | eq | 2017.3.23-r1 |
References
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.7_release_notes/index
access.redhat.com/errata/RHBA-2019:3723
access.redhat.com/errata/RHSA-2019:2308
access.redhat.com/errata/RHSA-2019:3345
access.redhat.com/security/updates/classification/#low
security.gentoo.org/glsa/202007-45
www.tuxera.com/community/release-history/
Related
ubuntu
ubuntu
NTFS-3G vulnerability
2019-03-21 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-1724-1)
2019-03-24 00:00:00
openSUSE: Security Advisory for ntfs-3g_ntfsprogs (openSUSE-SU-2019:1313-1)
2019-05-03 00:00:00
Debian: Security Advisory (DSA-4413-1)
2019-03-20 00:00:00
nessus
nessus
EulerOS 2.0 SP3 : libguestfs-winsupport (EulerOS-SA-2019-2253)
2019-11-08 00:00:00
RHEL 6 : libguestfs-winsupport (Unpatched Vulnerability)
2024-06-03 00:00:00
Debian DLA-1724-1 : ntfs-3g security update
2019-03-25 00:00:00
amazon
amazon
Low: libguestfs-winsupport
2020-10-22 18:11:00
altlinux
altlinux
Security fix for the ALT Linux 9 package ntfs-3g version 2:2017.3.23-alt3
2020-10-23 00:00:00
cbl_mariner
cbl_mariner
CVE-2019-9755 affecting package ntfs-3g for versions less than 2017.3.23-15
2022-04-09 15:39:56
CVE-2019-9755 affecting package ntfs-3g for versions less than 2017.3.23-15
2022-04-09 15:39:56
debian
debian
[SECURITY] [DLA 1724-1] ntfs-3g security update
2019-03-22 15:01:37
[SECURITY] [DSA 4413-1] ntfs-3g security update
2019-03-21 20:29:55
[SECURITY] [DSA 4413-1] ntfs-3g security update
2019-03-21 20:29:55
cve
cve
CVE-2019-9755
2019-06-05 15:29:03
fedora
fedora
[SECURITY] Fedora 29 Update: ntfs-3g-2017.3.23-11.fc29
2019-04-04 03:14:56
[SECURITY] Fedora 30 Update: ntfs-3g-2017.3.23-11.fc30
2019-04-02 00:03:57
[SECURITY] Fedora 28 Update: ntfs-3g-2017.3.23-11.fc28
2019-04-05 01:56:54
suse
suse
Security update for ntfs-3g_ntfsprogs (moderate)
2019-05-02 00:00:00
Security update for ntfs-3g_ntfsprogs (moderate)
2019-05-02 00:00:00
Security update for ntfs-3g_ntfsprogs (important)
2021-09-09 00:00:00
gentoo
gentoo
NTFS-3G: Remote code execution, possible privilege escalation
2020-07-27 00:00:00
redhat
redhat
(RHSA-2019:2308) Low: libguestfs-winsupport security update
2019-08-06 08:23:59
(RHSA-2019:3345) Low: virt:rhel security, bug fix, and enhancement update
2019-11-05 17:33:34
centos
centos
libguestfs security update
2019-08-30 03:16:00
ubuntucve
ubuntucve
CVE-2019-9755
2019-03-21 00:00:00
nvd
nvd
CVE-2019-9755
2019-06-05 15:29:03
alpinelinux
alpinelinux
CVE-2019-9755
2019-06-05 15:29:03
debiancve
debiancve
CVE-2019-9755
2019-06-05 15:29:03
oraclelinux
oraclelinux
libguestfs-winsupport security update
2019-08-13 00:00:00
virt:ol security, bug fix, and enhancement update
2019-11-14 00:00:00
redhatcve
redhatcve
CVE-2019-9755
2019-03-28 06:19:51
osv
osv
ntfs-3g - security update
2019-03-21 00:00:00
CVE-2019-9755
2019-06-05 15:29:03
ntfs-3g - security update
2019-03-22 00:00:00
prion
prion
Heap overflow
2019-06-05 15:29:00
cvelist
cvelist
CVE-2019-9755
2019-06-05 14:57:27
rocky
rocky
virt:rhel security, bug fix, and enhancement update
2019-11-05 17:33:34
almalinux
almalinux
Low: virt:rhel security, bug fix, and enhancement update
2019-11-05 17:33:34