NewStart CGSL MAIN 6.06 (SP) : e2fsprogs Multiple Vulnerabilities (NS-SA-2026-0025)

The remote NewStart CGSL host, running version MAIN 6.06 SP, has e2fsprogs packages installed that are affected by multiple vulnerabilities: - Heap-based buffer overflow in closefs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code by causing a...

MiracleLinux 3 : e2fsprogs-1.39-10.1.1AXS3 (AXBA:2008-317:03)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXBA:2008-317:03 advisory. - Multiple integer overflows in libext2fs in e2fsprogs before 1.40.3 allow user-assisted remote attackers to execute arbitrary code via a crafted filesystem...

EUVD-2007-5472

Malware in sbrugna...

EUVD-2015-1704

Malware in sbrugna...

EUVD-2015-0269

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2015-1572

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow in closefs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code by causing a crafted...

Oracle Linux 7 : e2fsprogs (ELSA-2024-12730)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-12730 advisory. - libext2fs: add sanity check to extent manipulation Srivathsa Dara Orabug: 37095032 CVE-2022-1304 - Fix potential buffer overflow in closefs 1193947,...

e2fsprogs security update

1.45.4-3.0.7.el7 - libext2fs: add sanity check to extent manipulation Srivathsa Dara Orabug: 37095032 CVE-2022-1304...

Oracle Linux 7 : e2fsprogs (ELSA-2024-12704)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-12704 advisory. 1.45.4-3.0.7 - libext2fs: add sanity check to extent manipulation Srivathsa Dara Orabug: 37095032 CVE-2022-1304 Tenable has extracted the preceding description...

e2fsprogs security update

1.45.4-3.0.7 - libext2fs: add sanity check to extent manipulation Srivathsa Dara Orabug: 37095032 CVE-2022-1304...

CLSA-2024-1711476689 e2fsprogs: Fix of CVE-2022-1304

CVE-2022-1304.patch: libext2fs: add sanity check to extent manipulation...

SUSE CVE-2007-5497

Multiple integer overflows in libext2fs in e2fsprogs before 1.40.3 allow user-assisted remote attackers to execute arbitrary code via a crafted filesystem image...

SUSE CVE-2015-0247

Heap-based buffer overflow in openfs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code via crafted block group descriptor data in a filesystem image...

SUSE CVE-2015-1572

Heap-based buffer overflow in closefs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code by causing a crafted block group descriptor to be marked as dirty. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0247...

SUSE: Security Advisory (SUSE-SU-2015:1103-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-RU-2019:2676-1 Recommended update for e2fsprogs

This update for e2fsprogs fixes the following issues: Security issue fixed: - CVE-2019-5094: Fixed an arbitrary code execution via specially crafted ext4 file systems. bsc1152101 Non-security issue fixed: - libext2fs: Call fsync2 to clear stale errors for a new a unix I/O channel. bsc1145716...

Mandriva Linux Security Advisory : e2fsprogs (MDVSA-2015:067)

Updated e2fsprogs packages fix security vulnerabilities : The libext2fs library, part of e2fsprogs and utilized by its utilities, is affected by a boundary check error on block group descriptor information, leading to a heap based buffer overflow. A specially crafted filesystem image can be used ...

libext2fs / e2fsprogs buffer overflow

Buffer overflow on block group descriptor information...

MGASA-2015-0088 Updated e2fsprogs packages fix CVE-2015-1572

Updated e2fsprogs packages fix security vulnerability: The libext2fs library, part of e2fsprogs and utilized by its utilities, is affected by a boundary check error on block group descriptor information, leading to a heap based buffer overflow. A specially crafted filesystem image can be used to...

CVE-2015-1572

Heap-based buffer overflow in closefs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code by causing a crafted block group descriptor to be marked as dirty. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0247...