e2fsprogs project vulnerabilities and exploits

(subscribe to this query)

An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.

E2fsprogs Project E2fsprogs 1.46.5 Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 6.0 Redhat Enterprise Linux 8.0 Fedoraproject Fedora 35

A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerabil...

E2fsprogs Project E2fsprogs Fedoraproject Fedora 30 Fedoraproject Fedora 31 Debian Debian Linux 8.0 Debian Debian Linux 9.0 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 19.10 Opensuse Leap 15.1 Netapp Hci Compute Node Firmware -Netapp Solidfire\\, Enterprise Sds \\& Hci Storage Node -

An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3. A specially crafted ext4 partition can cause an out-of-bounds write on the heap, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.

E2fsprogs Project E2fsprogs Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Fedoraproject Fedora 30 Fedoraproject Fedora 31 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.04 Canonical Ubuntu Linux 14.04 Netapp Solidfire -Netapp Hci Management Node -

Heap-based buffer overflow in closefs.c in the libext2fs library in e2fsprogs prior to 1.42.12 allows local users to execute arbitrary code by causing a crafted block group descriptor to be marked as dirty. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015...

E2fsprogs Project E2fsprogs Debian Debian Linux 7.0 Canonical Ubuntu Linux 10.04 Canonical Ubuntu Linux 14.10 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 14.04

Heap-based buffer overflow in openfs.c in the libext2fs library in e2fsprogs prior to 1.42.12 allows local users to execute arbitrary code via crafted block group descriptor data in a filesystem image.

E2fsprogs Project E2fsprogs Debian Debian Linux 7.0 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 14.10 Canonical Ubuntu Linux 10.04 Fedoraproject Fedora 20 Fedoraproject Fedora 21

The ext4_orphan_del function in fs/ext4/namei.c in the Linux kernel prior to 3.7.3 does not properly handle orphan-list entries for non-journal filesystems, which allows physically proximate malicious users to cause a denial of service (system hang) via a crafted filesystem on re...

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook