Multiple vulnerabilities have been found in NTFS-3G, the worst of which could result in privilege escalation.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| sys-fs/ntfs3g | * | < 2026.7.7 | >= 2026.7.7 |
NTFS-3G is a stable, full-featured, read-write NTFS driver for various operating systems.
Multiple vulnerabilities have been discovered in NTFS-3G. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All NTFS-3G users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-fs/ntfs3g-2026.7.7"
Multiple vulnerabilities have been found in NTFS-3G, the worst of which could result in arbitrary code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| sys-fs/ntfs3g | * | < 2022.10.3 | >= 2022.10.3 |
NTFS-3G is a stable, full-featured, read-write NTFS driver for various operating systems.
Multiple vulnerabilities have been discovered in NTFS-3G. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All NTFS-3G users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-fs/ntfs3g-2022.10.3"
A buffer overflow in NTFS-3g might allow local or remote attacker(s) to execute arbitrary code, or escalate privileges.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| sys-fs/ntfs3g | * | < 2017.3.23-r3 | >= 2017.3.23-r3 |
NTFS-3G is a stable, full-featured, read-write NTFS driver for various operating systems.
An integer underflow issue exists in NTFS-3G which may cause a heap buffer overflow with crafted input.
A remote attacker may be able to execute arbitrary code while a local attacker may be able to escalate privileges.
There is no known workaround at this time.
All NTFS-3G users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-fs/ntfs3g-2017.3.23-r3"
A vulnerability in NTFS-3G allows local users to gain root privileges.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| sys-fs/ntfs3g | * | < 2016.2.22-r2 | >= 2016.2.22-r2 |
NTFS-3G is a stable, full-featured, read-write NTFS driver for various operating systems.
The NTFS-3G driver does not properly clear environment variables before invoking mount or umount.
This flaw is similar to the vulnerability described in “GLSA-201701-19” and “GLSA-201603-04” referenced below but is now implemented in the NTFS-3G driver itself.
A local user could gain root privileges.
There is no known workaround at this time. However, on Gentoo when the “suid” USE flag is not set (which is the default) an attacker cannot exploit the flaw.
All NTFS-3G users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-fs/ntfs3g-2016.2.22-r2"
A vulnerability in NTFS-3G allows local users to gain root privileges.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| sys-fs/ntfs3g | * | < 2016.2.22 | >= 2016.2.22 |
NTFS-3G is a stable, full-featured, read-write NTFS driver for various operating systems.
NTFS-3G is affected by the same vulnerability as reported in “GLSA 201603-04” when the bundled fuse-lite implementation is used.
A local user could gain root privileges.
There is no known workaround at this time. However, on Gentoo when the “external-fuse” USE flag is set or the “suid” USE flag is not set then NTFS-3G is not affected. Both of these cases are the default configuration.
All NTFS-3G users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-fs/ntfs3g-2016.2.22"