USN-3914-2
ntfs-3g update
USN-3914-1 fixed vulnerabilities in NTFS-3G. As an additional hardening measure, this update removes the setuid bit from the ntfs-3g binary.
Original advisory details:
A heap buffer overflow was discovered in NTFS-3G when executing it with a relative mount point path that is too long. A local attacker could potentially exploit this to execute arbitrary code as the administrator.
What each source reports
OSV No score
ntfs-3g update
USN-3914-1 fixed vulnerabilities in NTFS-3G. As an additional hardening measure, this update removes the setuid bit from the ntfs-3g binary.
Original advisory details:
A heap buffer overflow was discovered in NTFS-3G when executing it with a relative mount point path that is too long. A local attacker could potentially exploit this to execute arbitrary code as the administrator.
- Record
USN-3914-2- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ntfs-3gUbuntu:16.04:LTS |
before 1:2015.3.14AR.1-1ubuntu0.3, plus listed versions 1:2014.2.15AR.3-31:2015.3.14AR.1-11:2015.3.14AR.1-1build11:2015.3.14AR.1-1ubuntu0.11:2015.3.14AR.1-1ubuntu0.2 |
1:2015.3.14AR.1-1ubuntu0.3 |
ntfs-3gUbuntu:18.04:LTS |
before 1:2017.3.23-2ubuntu0.18.04.2, plus listed versions 1:2016.2.22AR.2-21:2017.3.23-21:2017.3.23-2ubuntu0.18.04.1 |
1:2017.3.23-2ubuntu0.18.04.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-3914-2 is a vulnerability with no CVSS score yet in ntfs-3g, published April 17, 2019. No source lists public exploit code. Fixed in ntfs-3g 1:2015.3.14AR.1-1ubuntu0.3.