CVE-2022-1304

CVE-2022-1304 affects e2fsprogs 1.46.5 and is described as an out-of-bounds read/write vulnerability that can cause a segmentation fault and potentially allow arbitrary code execution via a crafted filesystem. Connected advisories corroborate this vulnerability class and reference platforms (e.g....

CVE-2019-5094

CVE-2019-5094 is a vulnerability in the quota file handling of e2fsprogs (ext4 utilities) that can trigger an out-of-bounds write on the heap, enabling potential arbitrary code execution when a malformed ext4 partition is processed. The description across sources identifies the affected component...

CVE-2019-5188

CVE-2019-5188 affects E2fsprogs e2fsck 1.45.4, where the directory rehashing function can trigger an out-of-bounds write on the stack, enabling code execution when processing a specially crafted ext4 directory. The vulnerability allows an attacker to corrupt a partition to trigger this code execu...

CVE-2015-1572

CVE-2015-1572 is a heap-based buffer overflow in closefs.c of the libext2fs library used by e2fsprogs, exploited when a crafted block group descriptor is marked dirty. Affected: e2fsprogs (libext2fs) prior to 1.42.12. Root cause: incomplete fix for CVE-2015-0247. Impact: local code execution poss...

CVE-2015-0247

CVE-2015-0247 is a heap-based buffer overflow in openfs.c of libext2fs (e2fsprogs) that allows local code execution via crafted block group descriptor data in Ext2/3/4 filesystem images. Affected: e2fsprogs/libext2fs; vulnerability due to heap overflow in open/close routines. Impact: arbitrary co...