Oval Definition:oval:com.ubuntu.bionic:def:201997550000000
Revision Date:2019-06-05Version:1
Title:CVE-2019-9755 on Ubuntu 18.04 LTS (bionic) - high.
Description:An integer underflow issue exists in ntfs-3g 2017.3.23. A local attacker could potentially exploit this by running /bin/ntfs-3g with specially crafted arguments from a specially crafted directory to cause a heap buffer overflow, resulting in a crash or the ability to execute arbitrary code. In installations where /bin/ntfs-3g is a setuid-root binary, this could lead to a local escalation of privileges.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2019-9755
Platform(s):Ubuntu 18.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 18.04 LTS (bionic) is installed.
  • AND ntfs-3g package in bionic was vulnerable but has been fixed (note: '1:2017.3.23-2ubuntu0.18.04.1').
  • BACK