CVE-2017-0358

Jann Horn of Google Project Zero discovered that NTFS-3G, a read-write NTFS driver for FUSE, does not scrub the environment before executing modprobe with elevated privileges. A local user can take advantage of this flaw for local root privilege escalation.

• CWE-269
• CWE-269

• http://www.openwall.com/lists/oss-security/2017/02/04/1Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/95987Third Party Advisory, VDB Entry
• https://marc.info/?l=oss-security&m=148594671929354&w=2Exploit, Mailing List, Third Party Advisory
• https://security.gentoo.org/glsa/201702-10Third Party Advisory
• https://www.debian.org/security/2017/dsa-3780
• https://www.exploit-db.com/exploits/41240/Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/41356/Exploit, Third Party Advisory, VDB Entry
• http://www.openwall.com/lists/oss-security/2017/02/04/1Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/95987Third Party Advisory, VDB Entry
• https://marc.info/?l=oss-security&m=148594671929354&w=2Exploit, Mailing List, Third Party Advisory
• https://security.gentoo.org/glsa/201702-10Third Party Advisory
• https://www.debian.org/security/2017/dsa-3780
• https://www.exploit-db.com/exploits/41240/Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/41356/Exploit, Third Party Advisory, VDB Entry

Published

Apr 13, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-0352All versions of the NVIDIA GPU Display Driver contain a vuln…
• CVE-2017-0353All versions of the NVIDIA GPU Display Driver contain a vuln…
• CVE-2017-0354All versions of the NVIDIA Windows GPU Display Driver contai…
• CVE-2017-0355All versions of the NVIDIA Windows GPU Display Driver contai…
• CVE-2017-0356A flaw, similar to to CVE-2016-9646, exists in ikiwiki befor…
• CVE-2017-0357A heap-overflow flaw exists in the -tr loader of iucode-tool…
• CVE-2017-0359diffoscope before 77 writes to arbitrary locations on disk b…9.8
• CVE-2017-0360file_open in Tryton 3.x and 4.x through 4.2.2 allows remote …
• CVE-2017-0361Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains an infor…
• CVE-2017-0362Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw w…
• CVE-2017-0363Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 has a flaw where …
• CVE-2017-0364Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw w…