CVE-2019-9755: Red Hat Enterprise Linux

High severity, CVSS 7.0. EPSS: 0.5% chance of exploitation in the next 30 days.

An integer underflow issue exists in ntfs-3g 2017.3.23. A local attacker could potentially exploit this by running /bin/ntfs-3g with specially crafted arguments from a specially crafted directory to cause a heap buffer overflow, resulting in a crash or the ability to execute arbitrary code. In installations where /bin/ntfs-3g is a setuid-root binary, this could lead to a local escalation of privileges.

Affected products

• Red Hat Enterprise Linux: version 8.0 only
• Red Hat Enterprise Linux Eus: version 8.1 only; version 8.2 only; version 8.4 only
• Red Hat Enterprise Linux Server: version 7.0 only
• Red Hat Enterprise Linux Server Aus: version 8.2 only; version 8.4 only
• Red Hat Enterprise Linux Server Tus: version 8.2 only; version 8.4 only
• Tuxera Ntfs-3g: version 2017.3.23 only

Published 2019-06-05. Last modified 2026-06-17.