Heap-based buffer overflow in openfs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code via crafted block group descriptor data in a filesystem image.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade e2fsprogs | Aug 30, 2017 | Feb 17, 2015 |
| Debian | — | Upgrade e2fsprogs | Jul 30, 2024 | Feb 17, 2015 |
| Freebsd | — | Upgrade e2fsprogs | Dec 10, 2025 | Feb 24, 2015 |
| Gentoo Linux | — | Upgrade sys-fs/e2fsprogs. | Oct 30, 2017 | Feb 17, 2015 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libcom_errUpgrade libcom_err-develUpgrade e2fsprogs-develUpgrade e2fsprogs-libsUpgrade e2fsprogsUpgrade libss | Nov 30, 2017 | Feb 17, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 5, 2015 |
| Suse | — | Upgrade libcom_err-develUpgrade libext2fs-devel-32bitUpgrade libcom_err2Upgrade libuuid1-32bitUpgrade libblkid-develUpgrade libblkid1-x86Upgrade libext2fs2-32bitUpgrade libext2fs-develUpgrade libcom_err2-x86Upgrade e2fsprogsUpgrade libblkid1Upgrade libblkid1-32bitUpgrade e2fsprogs-develUpgrade libuuid-develUpgrade libext2fs-devel-staticUpgrade libcom_err2-32bitUpgrade libuuid1Upgrade libuuid-devel-32bitUpgrade libuuid1-x86Upgrade libext2fs2Upgrade libcom_err-devel-32bitUpgrade libext2fs2-x86Upgrade uuid-runtimeUpgrade libcom_err-devel-staticUpgrade libblkid-devel-32bit | Dec 18, 2015 | Feb 17, 2015 |
| Ubuntu | — | Upgrade e2fsprogs | Nov 8, 2024 | Feb 17, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub