RHBA-2019:3723

RHSA-2019:2308

RHSA-2019:3345

GLSA-202007-45

https://www.tuxera.com/community/release-history/

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:3345 advisory.

  - QEMU: qxl: null pointer dereference while releasing spice resources (CVE-2019-12155)

  - ntfs-3g: heap-based buffer overflow leads to local root privilege escalation (CVE-2019-9755)

  - QEMU: slirp: information leakage in tcp_emu() due to uninitialized stack variables (CVE-2019-9824)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1522 advisory.

  - An integer underflow issue exists in ntfs-3g 2017.3.23. A local attacker could potentially exploit this by     running /bin/ntfs-3g with specially crafted arguments from a specially crafted directory to cause a heap     buffer overflow, resulting in a crash or the ability to execute arbitrary code. In installations where     /bin/ntfs-3g is a setuid-root binary, this could lead to a local escalation of privileges. (CVE-2019-9755)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the ntfs-3g packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - An integer underflow issue exists in ntfs-3g 2017.3.23.
    A local attacker could potentially exploit this by     running /bin/ntfs-3g with specially crafted arguments     from a specially crafted directory to cause a heap     buffer overflow, resulting in a crash or the ability to     execute arbitrary code. In installations where     /bin/ntfs-3g is a setuid-root binary, this could lead     to a local escalation of privileges.(CVE-2019-9755)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-202007-45 (NTFS-3G: Remote code execution, possible privilege escalation)

    An integer underflow issue exists in NTFS-3G which may cause a heap       buffer overflow with crafted input.
  Impact :

    A remote attacker may be able to execute arbitrary code while a local       attacker may be able to escalate privileges.
  Workaround :

    There is no known workaround at this time.

According to the version of the libguestfs-winsupport package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - This optional package adds support for Windows guests     (NTFS) to the virt-v2v and virt-p2v programs.Security     Fix(es):An integer underflow issue exists in ntfs-3g     2017.3.23. A local attacker could potentially exploit     this by running /bin/ ntfs-3g with specially crafted     arguments from a specially crafted directory to cause a     heap buffer overflow, resulting in a crash or the     ability to execute arbitrary code. In installations     where /bin/ ntfs-3g is a setuid-root binary, this could     lead to a local escalation of     privileges.(CVE-2019-9755)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the libguestfs-winsupport package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - An integer underflow issue exists in ntfs-3g 2017.3.23.
    A local attacker could potentially exploit this by     running /bin/ntfs-3g with specially crafted arguments     from a specially crafted directory to cause a heap     buffer overflow, resulting in a crash or the ability to     execute arbitrary code. In installations where     /bin/ntfs-3g is a setuid-root binary, this could lead     to a local escalation of privileges.(CVE-2019-9755)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update for the virt:rhel module is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link (s) in the References section.

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es) :

* ntfs-3g: heap-based buffer overflow leads to local root privilege escalation (CVE-2019-9755)

* QEMU: slirp: information leakage in tcp_emu() due to uninitialized stack variables (CVE-2019-9824)

* QEMU: qxl: NULL pointer dereference while releasing spice resources (CVE-2019-12155)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes :

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.1 Release Notes linked from the References section.

An update for libguestfs-winsupport is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link (s) in the References section.

The libguestfs-winsupport package adds support for Windows guests to libguestfs, a set of tools and libraries allowing users to access and modify virtual machine (VM) disk images.

Security Fix(es) :

* ntfs-3g: heap-based buffer overflow leads to local root privilege escalation (CVE-2019-9755)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes :

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.7 Release Notes linked from the References section.

Security Fix(es) :

  - ntfs-3g: heap-based buffer overflow leads to local root     privilege escalation (CVE-2019-9755)

This update for ntfs-3g_ntfsprogs fixes the following issues :

Security issues fixed :

  - CVE-2019-9755: Fixed a heap-based buffer overflow which     could lead to local privilege escalation (bsc#1130165).

This update was imported from the SUSE:SLE-15:Update update project.

This update for ntfs-3g_ntfsprogs fixes the following issues :

Security issues fixed :

  - CVE-2019-9755: Fixed a heap-based buffer overflow which     could lead to local privilege escalation (bsc#1130165).

This update was imported from the SUSE:SLE-12:Update update project.

Fix for CVE-2019-9755.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for ntfs-3g_ntfsprogs fixes the following issues :

Security issues fixed :

CVE-2019-9755: Fixed a heap-based buffer overflow which could lead to local privilege escalation (bsc#1130165).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix for CVE-2019-9755.

----

Add Recommends: ntfs-3g-system-compression

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A heap-based buffer overflow was discovered in NTFS-3G, a read-write NTFS driver for FUSE. A local user can take advantage of this flaw for local root privilege escalation.

A heap-based buffer overflow was discovered in NTFS-3G, a read-write NTFS driver for FUSE. A local user can take advantage of this flaw for local root privilege escalation.

For Debian 8 'Jessie', this problem has been fixed in version 1:2014.2.15AR.2-1+deb8u4.

We recommend that you upgrade your ntfs-3g packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
145576	CentOS 8 : virt:rhel (CESA-2019:3345)	Nessus	CentOS Local Security Checks	medium
141945	Amazon Linux 2 : libguestfs-winsupport (ALAS-2020-1522)	Nessus	Amazon Linux Local Security Checks	medium
139146	EulerOS 2.0 SP8 : ntfs-3g (EulerOS-SA-2020-1816)	Nessus	Huawei Local Security Checks	medium
138968	GLSA-202007-45 : NTFS-3G: Remote code execution, possible privilege escalation	Nessus	Gentoo Local Security Checks	medium
137464	EulerOS 2.0 SP2 : libguestfs-winsupport (EulerOS-SA-2020-1622)	Nessus	Huawei Local Security Checks	medium
130835	EulerOS 2.0 SP5 : libguestfs-winsupport (EulerOS-SA-2019-2126)	Nessus	Huawei Local Security Checks	medium
130715	EulerOS 2.0 SP3 : libguestfs-winsupport (EulerOS-SA-2019-2253)	Nessus	Huawei Local Security Checks	medium
130529	RHEL 8 : virt:rhel (RHSA-2019:3345)	Nessus	Red Hat Local Security Checks	medium
128389	CentOS 7 : libguestfs-winsupport (CESA-2019:2308)	Nessus	CentOS Local Security Checks	medium
128230	Scientific Linux Security Update : libguestfs-winsupport on SL7.x x86_64 (20190806)	Nessus	Scientific Linux Local Security Checks	medium
127711	RHEL 7 : libguestfs-winsupport (RHSA-2019:2308)	Nessus	Red Hat Local Security Checks	medium
124583	openSUSE Security Update : ntfs-3g_ntfsprogs (openSUSE-2019-1314)	Nessus	SuSE Local Security Checks	medium
124582	openSUSE Security Update : ntfs-3g_ntfsprogs (openSUSE-2019-1313)	Nessus	SuSE Local Security Checks	medium
124548	Fedora 30 : 2:ntfs-3g (2019-e42442fb33)	Nessus	Fedora Local Security Checks	medium
124294	SUSE SLED15 / SLES15 Security Update : ntfs-3g_ntfsprogs (SUSE-SU-2019:1001-1)	Nessus	SuSE Local Security Checks	medium
124293	SUSE SLED12 Security Update : ntfs-3g_ntfsprogs (SUSE-SU-2019:1000-1)	Nessus	SuSE Local Security Checks	medium
123765	Fedora 28 : 2:ntfs-3g (2019-c1e6c6edd9)	Nessus	Fedora Local Security Checks	medium
123695	Fedora 29 : 2:ntfs-3g (2019-e396eacd61)	Nessus	Fedora Local Security Checks	medium
123023	Debian DSA-4413-1 : ntfs-3g - security update	Nessus	Debian Local Security Checks	medium
123018	Debian DLA-1724-1 : ntfs-3g security update	Nessus	Debian Local Security Checks	medium

CVE-2019-9755

MEDIUM

Description

References

Details

Risk Information

CVSS v2.0

CVSS v3.0

Vulnerable Software

Configuration 1

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium