In the NTFS-3G project release 2022.5.17, which develops the driver and toolkit for working with the NTFS file system in user space, 8 vulnerabilities were fixed that allow privilege escalation in the system. The issues were caused by insufficient checks when processing command-line options and handling metadata in NTFS partitions.
- CVE-2022-30783, CVE-2022-30785, CVE-2022-30787 — vulnerabilities in the NTFS-3G driver built with the embedded libfuse library (libfuse-lite) or with the system library libfuse2. An attacker can execute arbitrary code with root privileges by manipulating command-line options when having access to the executable ntfs-3g provided with the suid root flag. A working prototype exploit has been demonstrated for these vulnerabilities.
- CVE-2021-46790, CVE-2022-30784, CVE-2022-30786, CVE-2022-30788, CVE-2022-30789 — vulnerabilities in the metadata parsing code in NTFS partitions that lead to buffer overflows due to insufficient checks. An attack can be carried out when processing an NTFS-3G partition prepared by an attacker. For instance, when a user mounts a storage device prepared by the attacker, or if the attacker has unprivileged local access to the system. If the system is configured for automatic mounting of NTFS partitions on external drives, it is enough to connect a USB flash drive with a specially crafted partition to the computer for an attack. Working exploits for these vulnerabilities have not yet been demonstrated.
Source: opennet.ru
