Amazon Linux AMI : e2fsprogs (ALAS-2015-478)

A heap-based buffer overflow flaw was found in e2fsprogs. A specially crafted Ext2/3/4 file system could cause an application using the ext2fs library for example, fsck to crash or, possibly, execute arbitrary code. C Tenable Network Security, Inc. The descriptive text and package checks in this...

Mandriva Linux Security Advisory : e2fsprogs (MDVSA-2015:045)

Updated e2fsprogs packages fix security vulnerability : The libext2fs library, part of e2fsprogs and utilized by its utilities, is affected by a boundary check error on block group descriptor information, leading to a heap based buffer overflow. A specially crafted filesystem image can be used to...

MGASA-2015-0061 Updated e2fsprogs packages fix CVE-2015-0247

Updated e2fsprogs packages fix security vulnerability: The libext2fs library, part of e2fsprogs and utilized by its utilities, is affected by a boundary check error on block group descriptor information, leading to a heap based buffer overflow. A specially crafted filesystem image can be used to...

Updated e2fsprogs packages fix CVE-2015-0247

Updated e2fsprogs packages fix security vulnerability: The libext2fs library, part of e2fsprogs and utilized by its utilities, is affected by a boundary check error on block group descriptor information, leading to a heap based buffer overflow. A specially crafted filesystem image can be used to...

Medium: e2fsprogs

Issue Overview: A heap-based buffer overflow flaw was found in e2fsprogs. A specially crafted Ext2/3/4 file system could cause an application using the ext2fs library for example, fsck to crash or, possibly, execute arbitrary code. Affected Packages: e2fsprogs Issue Correction: Run yum update...

Fedora Update for e2fsprogs FEDORA-2015-1840

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 21 Update: e2fsprogs-1.42.12-1.fc21

The e2fsprogs package contains a number of utilities for creating, checking, modifying, and correcting any inconsistencies in second, third and fourth extended ext2/ext3/ext4 filesystems. E2fsprogs contains e2fsck used to repair filesystem inconsistencies after an unclean shutdown, mke2fs used to...

Fedora 21 : e2fsprogs-1.42.12-1.fc21 (2015-1840)

New upstream release Security fix for CVE-2015-0247 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

e2fsprogs 'lib/ext2fs/openfs.c' local buffer overflow vulnerability

e2fsprogs Ext2 Filesystem Utilities is a set of disk utilities for the EXT2 filesystem. A local buffer overflow vulnerability exists in e2fsprogs 'lib/ext2fs/openfs.c' due to the program's failure to perform sufficient boundary checks on user-supplied data. A local attacker could use this...

e2fsprogs -- potential buffer overflow in closefs()

Theodore Ts'o reports: On a carefully crafted filesystem that gets modified through tune2fs or debugfs, it is possible to trigger a buffer overrun when the file system is closed via closefs...

e2fsprogs -- buffer overflow if s_first_meta_bg too big

Theodore Ts'o reports: If sfirstmetabg is greater than the of number block group descriptor blocks, then reading or writing the block group descriptors will end up overruning the memory buffer allocated for the descriptors. The finding is credited to a vulnerability report from Jose Duart of Goog...

Oracle Linux 5 : Moderate: / e2fsprogs (ELSA-2008-0003)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2008-0003 advisory. 1.32-15.4 - Fix integer overflows 414611 / CVE-2007-5497 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Scientific Linux Security Update : e2fsprogs on SL5.x, SL4.x, SL3.x i386/x86_64

Multiple integer overflow flaws were found in the way e2fsprogs processes file system content. If a victim opens a carefully crafted file system with a program using e2fsprogs, it may be possible to execute arbitrary code with the permissions of the victim. It may be possible to leverage this fla...

SLES9: Security update for e2fsprogs

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: e2fsprogs e2fsprogs-devel For more information, please visit the referenced security advisories. More details may also be found by searching for keyword...

SLES9: Security update for e2fsprogs

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: e2fsprogs-devel e2fsprogs For more information, please visit the referenced security advisories. More details may also be found by searching for keyword...

SLES9: Security update for e2fsprogs

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: e2fsprogs-devel e2fsprogs For more information, please visit the referenced security advisories. More details may also be found by searching for keyword...

SLES9: Security update for e2fsprogs

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: e2fsprogs e2fsprogs-devel For more information, please visit the referenced security advisories. More details may also be found by searching for keyword...

SuSE9 Security Update : e2fsprogs (YOU Patch Number 12019)

This update of e2fsprogs fixes several integer overflows in memory allocating code. Programs that use libext2fs are therefore vulnerable to memory corruptions that can lead to arbitrary code execution while loading a specially crafted image. CVE-2007-5497 %NASLMINLEVEL 70300 C Tenable Network...

SuSE9 Security Update : e2fsprogs (YOU Patch Number 11997)

This update of e2fsprogs fixes several integer overflows in memory allocating code. Programs that use libext2fs are therefore vulnerable to memory corruptions that can lead to arbitrary code execution while loading a specially crafted image. CVE-2007-5497 %NASLMINLEVEL 70300 C Tenable Network...

VMSA-2008-0004 : Low: Updated e2fsprogs service console package

Updated e2fsprogs package address multiple integer overflow flaws Thanks to Rafal Wojtczuk of McAfee Avert Research for identifying and reporting this issue. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the name CVE-2007-5497 to this issue. %NASLMINLEVEL 70300 C...