CVE-2017-0358 ntfs-3g: Modprobe influence vulnerability via environment variables
HighCVSS 7.8
EPSS 2.2%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Jann Horn of Google Project Zero discovered that NTFS-3G, a read-write NTFS driver for FUSE, does not scrub the environment before executing modprobe with elevated privileges. A local user can take advantage of this flaw for local root privilege escalation.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/ntfs-3g(Debian:12) | < 1:2016.2.22AR.1-4 | 1:2016.2.22AR.1-4 |
| debian/ntfs-3g(Debian:13) | < 1:2016.2.22AR.1-4 | 1:2016.2.22AR.1-4 |
| debian/ntfs-3g(Debian:14) | < 1:2016.2.22AR.1-4 | 1:2016.2.22AR.1-4 |
| Tuxera NTFS-3G | <= 2016.2.22 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| ntfs-3g | All versions | No fix listed |
References
- Debian Security Tracker CVE-2017-0358 vendor-advisory
- [oss-security] 20170203 Re: CVE-2017-0358 ntfs-3g: modprobe influence vulnerability via environment variables mailing-list third-party-advisory
- 95987 third-party-advisory vdb-entry
- [oss-security] 20170201 CVE-2017-0358 ntfs-3g: modprobe influence vulnerability via environment variables exploit mailing-list third-party-advisory
- GLSA-201702-10 third-party-advisory vendor-advisory
- DSA-3780 vendor-advisory
- 41240 exploit third-party-advisory vdb-entry
- 41356 exploit third-party-advisory vdb-entry