ntfs-3g

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

ntfs-3g records in CISA KEV

No ntfs-3g vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ntfs-3g 1 record LOW

Records

2 records

TI-2017-00333 CVE-2017-0358 · GHSA-vghw-r4fc-pgpf

ntfs-3g: Modprobe influence vulnerability via environment variables

HIGH 69

Jann Horn of Google Project Zero discovered that NTFS-3G, a read-write NTFS driver for FUSE, does not scrub the environment before executing modprobe with elevated privileges.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.02189 Published 2018-04-13 No fix listed CWE-269

TI-2007-04970 CVE-2007-5159 · GHSA-r584-r284-xhg9

The ntfs-3g package before 1.913-2.fc7 in Fedora 7, and an ntfs-3g package in Ubuntu…

LOW 21

The ntfs-3g package before 1.913-2.fc7 in Fedora 7, and an ntfs-3g package in Ubuntu 7.10/Gutsy, assign incorrect permissions (setuid root) to mount.ntfs-3g, which allows local users with fuse group membership to read fr…

CVSS 2.0MEDIUM 4.6 Local No auth Interaction — EPSS 0.00354 Published 2007-10-01 No fix listed CWE-264

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0