Vulnerability Spotlight: Code execution vulnerability in E2fsprogs

🗓️ 14 Jan 2020 11:31:08Reported by [email protected] (Jon Munshaw)Type

Code execution vulnerability in E2fsprogs directory rehashing functionality. Out-of-bounds write on the stack allows for code execution

Reporter	Title	Published	Views	Family All 119
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities	15 Apr 202221:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	27 Jan 202100:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Security is affected by multiple vulnerabilities.	19 Jul 202221:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	27 Jan 202100:05	–	ibm
FreeBSD	e2fsprogs -- rehash.c/pass 3a mutate_name() code execution vulnerability	18 Dec 201900:00	–	freebsd
Tenable Nessus	Amazon Linux 2 : e2fsprogs (ALAS-2020-1509)	27 Oct 202000:00	–	nessus
Tenable Nessus	Amazon Linux AMI : e2fsprogs (ALAS-2020-1459) (deprecated)	19 Dec 202000:00	–	nessus
Tenable Nessus	Amazon Linux AMI : e2fsprogs (ALAS-2021-1458)	14 Jan 202100:00	–	nessus
Tenable Nessus	CentOS 7 : e2fsprogs (RHSA-2020:4011)	20 Oct 202000:00	–	nessus
Tenable Nessus	Debian DLA-2156-1 : e2fsprogs security update	25 Mar 202000:00	–	nessus

14 Jan 2020 11:31Current

1.2Low risk

Vulners AI Score1.2

EPSS0.01025