Lucene search

K
mageiaGentoo FoundationMGASA-2015-0061
HistoryFeb 11, 2015 - 11:47 p.m.

Updated e2fsprogs packages fix CVE-2015-0247

2015-02-1123:47:51
Gentoo Foundation
advisories.mageia.org
15

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

19.2%

Updated e2fsprogs packages fix security vulnerability: The libext2fs library, part of e2fsprogs and utilized by its utilities, is affected by a boundary check error on block group descriptor information, leading to a heap based buffer overflow. A specially crafted filesystem image can be used to trigger the vulnerability (CVE-2015-0247).

OSVersionArchitecturePackageVersionFilename
Mageia4noarche2fsprogs< 1.42.9-2.1e2fsprogs-1.42.9-2.1.mga4

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

19.2%