Lucene search
Gentoo FoundationGLSA-202402-15HistoryFeb 18, 2024 - 12:00 a.m.
e2fsprogs: Arbitrary Code Execution
2024-02-1800:00:00
Gentoo Foundation
security.gentoo.org
5
e2fsprogs
arbitrary code execution
out-of-bounds read/write
segmentation fault
filesystem crafted
security vulnerabilities
resolution
maintenance
ext2
ext3
ext4.
Background
e2fsprogs is a set of utilities for maintaining the ext2, ext3 and ext4 file systems.
Description
Multiple vulnerabilities have been discovered in e2fsprogs. Please review the CVE identifiers referenced below for details.
Impact
An out-of-bounds read/write vulnerability was found in e2fsprogs. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.
Workaround
There is no known workaround at this time.
Resolution
All e2fsprogs users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=sys-fs/e2fsprogs-1.46.6"
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Gentoo | any | all | sys-fs/e2fsprogs | <Â 1.46.6 | UNKNOWN |
Related
nessus
nessus
EulerOS Virtualization 3.0.6.6 : e2fsprogs (EulerOS-SA-2022-2493)
2022-10-09 00:00:00
EulerOS 2.0 SP3 : e2fsprogs (EulerOS-SA-2022-2600)
2022-10-28 00:00:00
EulerOS 2.0 SP10 : e2fsprogs (EulerOS-SA-2022-2647)
2022-11-02 00:00:00
osv
osv
e2fsprogs vulnerability
2022-06-07 18:36:50
Moderate: e2fsprogs security and bug fix update
2022-11-08 00:00:00
Moderate: e2fsprogs security and bug fix update
2022-11-08 06:27:02
ubuntucve
ubuntucve
CVE-2022-1304
2022-04-14 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for e2fsprogs (EulerOS-SA-2022-2600)
2022-10-28 00:00:00
Huawei EulerOS: Security Advisory for e2fsprogs (EulerOS-SA-2023-1634)
2023-04-27 00:00:00
Huawei EulerOS: Security Advisory for e2fsprogs (EulerOS-SA-2022-2493)
2022-10-10 00:00:00
suse
suse
Security update for e2fsprogs (important)
2022-05-16 00:00:00
Security update for e2fsprogs (important)
2022-05-17 00:00:00
oraclelinux
oraclelinux
e2fsprogs security and bug fix update
2022-11-15 00:00:00
e2fsprogs security update
2022-11-22 00:00:00
redos
redos
ROS-20220622-01
2022-06-22 00:00:00
cloudfoundry
cloudfoundry
USN-5464-1: E2fsprogs vulnerability | Cloud Foundry
2022-07-28 00:00:00
veracode
veracode
Denial Of Service (DoS)
2022-06-16 17:19:02
ubuntu
ubuntu
e2fsprogs vulnerability
2022-06-07 00:00:00
rocky
rocky
e2fsprogs security and bug fix update
2022-11-08 06:27:02
e2fsprogs security update
2022-11-15 06:22:38
ibm
ibm
Security Bulletin: IBM App Connect Enterprise Certified Container may be vulnerable to arbitrary code execution due to CVE-2022-1304
2022-12-01 16:44:55
redhat
redhat
(RHSA-2022:7720) Moderate: e2fsprogs security and bug fix update
2022-11-08 06:27:02
(RHSA-2022:8361) Moderate: e2fsprogs security update
2022-11-15 06:22:38
(RHSA-2023:0786) Important: Network observability 1.1.0 security update
2023-02-15 11:39:53
photon
photon
Important Photon OS Security Update - PHSA-2023-0315
2023-01-18 00:00:00
Important Photon OS Security Update - PHSA-2023-5.0-0165
2023-12-08 00:00:00
Important Photon OS Security Update - PHSA-2023-4.0-0315
2023-01-18 00:00:00
prion
prion
Design/Logic Flaw
2022-04-14 21:15:00
amazon
amazon
Medium: e2fsprogs
2022-12-01 20:31:00
freebsd
freebsd
e2fsprogs -- out-of-bounds read/write vulnerability
2022-03-24 00:00:00
almalinux
almalinux
Moderate: e2fsprogs security and bug fix update
2022-11-08 00:00:00
Moderate: e2fsprogs security update
2022-11-15 00:00:00
cnvd
cnvd
E2fsprogs out-of-bounds read/write vulnerability
2022-04-18 00:00:00
cvelist
cvelist
CVE-2022-1304
2022-04-14 20:05:47
cve
cve
CVE-2022-1304
2022-04-14 21:15:00
debiancve
debiancve
CVE-2022-1304
2022-04-14 21:15:00
alpinelinux
alpinelinux
CVE-2022-1304
2022-04-14 21:15:00
mageia
mageia
Updated e2fsprogs packages fix security vulnerability
2022-10-24 01:48:35
cbl_mariner
cbl_mariner
CVE-2022-1304 affecting package e2fsprogs for versions less than 1.46.5-3
2022-09-13 22:36:40
redhatcve
redhatcve
CVE-2022-1304
2022-04-11 17:37:47
citrix
citrix
Citrix Hypervisor Multiple Security Updates
2023-10-10 14:57:16
ics
ics
Siemens SCALANCE, RUGGEDCOM Third-Party
2023-03-16 12:00:00
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00
avleonov
avleonov