Oval Definition:oval:org.opensuse.security:def:20170358
Revision Date:2022-09-02Version:1
Title:CVE-2017-0358
Description:

Jann Horn of Google Project Zero discovered that NTFS-3G, a read-write NTFS driver for FUSE, does not scrub the environment before executing modprobe with elevated privileges. A local user can take advantage of this flaw for local root privilege escalation.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2017-0358
SUSE-SU-2018:2070-1
SUSE-SU-2018:3587-1
SUSE-SU-2018:3587-2
openSUSE-SU-2018:3696-1
Mitre CVE-2017-0358
SUSE CVE-2017-0358
SUSE-SU-2018:2070-1
SUSE-SU-2018:3587-1
SUSE-SU-2018:3587-2
SUSE-SU-2021:2965-1
openSUSE-SU-2018:3696-1
Platform(s):openSUSE Leap 42.3
SUSE Linux Enterprise Desktop 11 SP4
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise Desktop 12 SP5
SUSE Linux Enterprise Server 11 SP4
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server 12 SP5
SUSE Linux Enterprise Server for SAP Applications 11 SP4
SUSE Linux Enterprise Server for SAP Applications 12 SP3
SUSE Linux Enterprise Server for SAP Applications 12 SP4
SUSE Linux Enterprise Server for SAP Applications 12 SP5
SUSE Linux Enterprise Software Development Kit 11 SP4
SUSE Linux Enterprise Software Development Kit 12 SP3
SUSE Linux Enterprise Software Development Kit 12 SP4
SUSE Linux Enterprise Software Development Kit 12 SP5
SUSE Linux Enterprise Workstation Extension 12 SP3
SUSE Linux Enterprise Workstation Extension 12 SP4
SUSE Linux Enterprise Workstation Extension 12 SP5
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 11 SP4 is installed
  • AND Package Information
  • ntfs-3g-2011.4.12-0.9.3 is installed
  • OR ntfs-3g-devel-2011.4.12-0.9.3 is installed
  • OR ntfsprogs-2011.4.12-0.9.3 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • AND
  • libntfs-3g84-2013.1.13-5.3 is installed
  • OR ntfs-3g-2013.1.13-5.3 is installed
  • OR ntfs-3g_ntfsprogs-2013.1.13-5.3 is installed
  • OR ntfsprogs-2013.1.13-5.3 is installed
  • OR Package Information
  • SUSE Linux Enterprise Software Development Kit 12 SP3 is installed
  • AND
  • libntfs-3g-devel-2013.1.13-5.3 is installed
  • OR libntfs-3g84-2013.1.13-5.3 is installed
  • OR ntfs-3g_ntfsprogs-2013.1.13-5.3 is installed
  • OR Package Information
  • SUSE Linux Enterprise Workstation Extension 12 SP3 is installed
  • AND
  • libntfs-3g84-2013.1.13-5.3 is installed
  • OR ntfs-3g-2013.1.13-5.3 is installed
  • OR ntfs-3g_ntfsprogs-2013.1.13-5.3 is installed
  • OR ntfsprogs-2013.1.13-5.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • AND Package Information
  • libntfs-3g84-2013.1.13-5.3 is installed
  • OR ntfs-3g-2013.1.13-5.3 is installed
  • OR ntfs-3g_ntfsprogs-2013.1.13-5.3 is installed
  • OR ntfsprogs-2013.1.13-5.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 12 SP3 is installed
  • AND Package Information
  • libntfs-3g84-2013.1.13-5.3 is installed
  • OR ntfs-3g-2013.1.13-5.3 is installed
  • OR ntfs-3g_ntfsprogs-2013.1.13-5.3 is installed
  • OR ntfsprogs-2013.1.13-5.3 is installed
    • Definition Synopsis
  • openSUSE Leap 42.3 is installed
  • AND Package Information
  • libntfs-3g-devel-2013.1.13-7.3 is installed
  • AND libntfs-3g-devel is signed with openSUSE key
  • OR
  • libntfs-3g84-2013.1.13-7.3 is installed
  • AND libntfs-3g84 is signed with openSUSE key
  • OR
  • ntfs-3g-2013.1.13-7.3 is installed
  • AND ntfs-3g is signed with openSUSE key
  • OR
  • ntfs-3g_ntfsprogs-2013.1.13-7.3 is installed
  • AND ntfs-3g_ntfsprogs is signed with openSUSE key
  • OR
  • ntfsprogs-2013.1.13-7.3 is installed
  • AND ntfsprogs is signed with openSUSE key
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • OR SUSE Linux Enterprise Desktop 12 SP4 is installed
  • OR SUSE Linux Enterprise Workstation Extension 12 SP3 is installed
  • OR SUSE Linux Enterprise Workstation Extension 12 SP4 is installed
  • AND
  • libntfs-3g84-2013.1.13-5.3 is installed
  • OR ntfs-3g-2013.1.13-5.3 is installed
  • OR ntfs-3g_ntfsprogs-2013.1.13-5.3 is installed
  • OR ntfsprogs-2013.1.13-5.3 is installed
  • OR Package Information
  • SUSE Linux Enterprise Software Development Kit 12 SP3 is installed
  • OR SUSE Linux Enterprise Software Development Kit 12 SP4 is installed
  • AND
  • libntfs-3g-devel-2013.1.13-5.3 is installed
  • OR libntfs-3g84-2013.1.13-5.3 is installed
  • OR ntfs-3g_ntfsprogs-2013.1.13-5.3 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • OR SUSE Linux Enterprise Desktop 12 SP4 is installed
  • AND Package Information
  • libntfs-3g84-2013.1.13-5.3.1 is installed
  • OR ntfs-3g-2013.1.13-5.3.1 is installed
  • OR ntfsprogs-2013.1.13-5.3.1 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Workstation Extension 12 SP3 is installed
  • OR SUSE Linux Enterprise Workstation Extension 12 SP4 is installed
  • AND Package Information
  • libntfs-3g84-2013.1.13-5.3 is installed
  • OR ntfs-3g-2013.1.13-5.3 is installed
  • OR ntfs-3g_ntfsprogs-2013.1.13-5.3 is installed
  • OR ntfsprogs-2013.1.13-5.3 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • OR SUSE Linux Enterprise Desktop 12 SP4 is installed
  • OR SUSE Linux Enterprise Workstation Extension 12 SP3 is installed
  • OR SUSE Linux Enterprise Workstation Extension 12 SP4 is installed
  • AND
  • libntfs-3g84-2013.1.13-5.3 is installed
  • OR ntfs-3g-2013.1.13-5.3 is installed
  • OR ntfs-3g_ntfsprogs-2013.1.13-5.3 is installed
  • OR ntfsprogs-2013.1.13-5.3 is installed
  • OR Package Information
  • SUSE Linux Enterprise Software Development Kit 12 SP3 is installed
  • OR SUSE Linux Enterprise Software Development Kit 12 SP4 is installed
  • AND
  • libntfs-3g-devel-2013.1.13-5.3 is installed
  • OR libntfs-3g84-2013.1.13-5.3 is installed
  • OR ntfs-3g_ntfsprogs-2013.1.13-5.3 is installed
  • OR Package Information
  • SUSE Linux Enterprise Workstation Extension 12 SP5 is installed
  • AND
  • libntfs-3g84-2013.1.13-5.6 is installed
  • OR ntfs-3g-2013.1.13-5.6 is installed
  • OR ntfsprogs-2013.1.13-5.6 is installed
  • OR Package Information
  • SUSE Linux Enterprise Software Development Kit 12 SP5 is installed
  • AND
  • libntfs-3g-devel-2013.1.13-5.6 is installed
  • OR libntfs-3g84-2013.1.13-5.6 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Workstation Extension 12 SP3 is installed
  • OR SUSE Linux Enterprise Workstation Extension 12 SP4 is installed
  • AND
  • libntfs-3g84-2013.1.13-5.3 is installed
  • OR ntfs-3g-2013.1.13-5.3 is installed
  • OR ntfs-3g_ntfsprogs-2013.1.13-5.3 is installed
  • OR ntfsprogs-2013.1.13-5.3 is installed
  • OR Package Information
  • SUSE Linux Enterprise Workstation Extension 12 SP5 is installed
  • AND
  • libntfs-3g84-2013.1.13-5.6 is installed
  • OR ntfs-3g-2013.1.13-5.6 is installed
  • OR ntfsprogs-2013.1.13-5.6 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 11 SP4 is installed
  • AND Package Information
  • ntfs-3g-2011.4.12-0.9.3.1 is installed
  • OR ntfs-3g-devel-2011.4.12-0.9.3.1 is installed
  • OR ntfsprogs-2011.4.12-0.9.3.1 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • OR SUSE Linux Enterprise Desktop 12 SP4 is installed
  • OR SUSE Linux Enterprise Workstation Extension 12 SP3 is installed
  • OR SUSE Linux Enterprise Workstation Extension 12 SP4 is installed
  • AND
  • libntfs-3g84-2013.1.13-5.3.1 is installed
  • OR ntfs-3g-2013.1.13-5.3.1 is installed
  • OR ntfsprogs-2013.1.13-5.3.1 is installed
  • OR Package Information
  • SUSE Linux Enterprise Software Development Kit 12 SP3 is installed
  • OR SUSE Linux Enterprise Software Development Kit 12 SP4 is installed
  • AND
  • libntfs-3g-devel-2013.1.13-5.3.1 is installed
  • OR libntfs-3g84-2013.1.13-5.3.1 is installed
  • OR Package Information
  • SUSE Linux Enterprise Software Development Kit 12 SP5 is installed
  • AND
  • libntfs-3g-devel-2021.8.22-5.9.1 is installed
  • OR libntfs-3g84-2021.8.22-5.9.1 is installed
  • OR Package Information
  • SUSE Linux Enterprise Workstation Extension 12 SP5 is installed
  • AND
  • libntfs-3g84-2021.8.22-5.9.1 is installed
  • OR ntfs-3g-2021.8.22-5.9.1 is installed
  • OR ntfsprogs-2021.8.22-5.9.1 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 12 SP5 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed
  • OR SUSE Linux Enterprise Software Development Kit 12 SP5 is installed
  • AND
  • libntfs-3g-devel-2021.8.22-5.9.1 is installed
  • OR libntfs-3g84-2021.8.22-5.9.1 is installed
  • OR Package Information
  • SUSE Linux Enterprise Desktop 12 SP5 is installed
  • OR SUSE Linux Enterprise Server 12 SP5 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed
  • OR SUSE Linux Enterprise Workstation Extension 12 SP5 is installed
  • AND
  • libntfs-3g84-2021.8.22-5.9.1 is installed
  • OR ntfs-3g-2021.8.22-5.9.1 is installed
  • OR ntfsprogs-2021.8.22-5.9.1 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Desktop 12 SP4 is installed
  • OR SUSE Linux Enterprise Server 12 SP4 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed
  • OR SUSE Linux Enterprise Workstation Extension 12 SP4 is installed
  • AND
  • libntfs-3g84-2013.1.13-5.3.1 is installed
  • OR ntfs-3g-2013.1.13-5.3.1 is installed
  • OR ntfsprogs-2013.1.13-5.3.1 is installed
  • OR Package Information
  • SUSE Linux Enterprise Desktop 12 SP4 is installed
  • OR SUSE Linux Enterprise Server 12 SP4 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed
  • OR SUSE Linux Enterprise Software Development Kit 12 SP4 is installed
  • AND
  • libntfs-3g-devel-2013.1.13-5.3.1 is installed
  • OR libntfs-3g84-2013.1.13-5.3.1 is installed
    • BACK