Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 569
Alerts This Week
Warning Icon 1 569

Ubuntu 21.04: 5060-1 Critical: NTFS-3G Arbitrary Code Execution

ubuntu
Calendar Grey August 31, 2021
Dist Ubuntu Esm H88
Explore the NTFS-3G security flaws impacting versions 20.04, 21.04, and 18.04 of Ubuntu caused by specially designed image files.
NTFS-3G could be made to execute arbitrary code if it received a specially crafted image file.

Summary

NTFS-3G could be made to execute arbitrary code if it received a specially

crafted image file.

Software Description:

- ntfs-3g: read/write NTFS driver for FUSE

Details:

It was discovered that NTFS-3G incorrectly handled certain image file.

An attacker could possibly use this issue to execute arbitrary code.

Topics%20covered

Topics Covered

security advisory critical arbitrary code execution Ubuntu update instructions ntfs-3g

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 21.04:
  ntfs-3g                         1:2017.3.23AR.3-3ubuntu4.1

Ubuntu 20.04 LTS:
  ntfs-3g                         1:2017.3.23AR.3-3ubuntu1.1

Ubuntu 18.04 LTS:
  ntfs-3g                         1:2017.3.23-2ubuntu0.18.04.3

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5060-1

https://bugs.launchpad.net/ubuntu/+source/ntfs-3g/+bug/1942235

Severity
critical
Lowest
Low
Medium
High
Critical

August 31, 2021

Topics%20covered

Topics Covered

security advisory critical arbitrary code execution Ubuntu update instructions ntfs-3g

Package Information

https://launchpad.net/ubuntu/+source/ntfs-3g/1:2017.3.23AR.3-3ubuntu4.1
https://launchpad.net/ubuntu/+source/ntfs-3g/1:2017.3.23AR.3-3ubuntu1.1
https://launchpad.net/ubuntu/+source/ntfs-3g/1:2017.3.23-2ubuntu0.18.04.3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.