An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3. A specially crafted ext4 partition can cause an out-of-bounds write on the heap resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.

🗓️ 12 Jan 2021 08:00:00Reported by MicrosoftType

Crafted extended four filesystem partition exploits quota file in E2fsprogs 1.45.3 to cause code execution.

Reporter	Title	Published	Views	Family All 117
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities	15 Apr 202221:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	27 Jan 202100:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Security is affected by multiple vulnerabilities.	19 Jul 202221:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	27 Jan 202100:05	–	ibm
FreeBSD	e2fsprogs -- maliciously corrupted file systems can trigger buffer overruns in the quota code used by e2fsck	23 Sep 201900:00	–	freebsd
Tenable Nessus	Amazon Linux 2 : e2fsprogs (ALAS-2020-1509)	27 Oct 202000:00	–	nessus
Tenable Nessus	Amazon Linux AMI : e2fsprogs (ALAS-2020-1459) (deprecated)	19 Dec 202000:00	–	nessus
Tenable Nessus	Amazon Linux AMI : e2fsprogs (ALAS-2021-1458)	14 Jan 202100:00	–	nessus
Tenable Nessus	CentOS 8 : e2fsprogs (CESA-2020:1913)	1 Feb 202100:00	–	nessus
Tenable Nessus	CentOS 7 : e2fsprogs (RHSA-2020:4011)	20 Oct 202000:00	–	nessus