Multiple integer overflows in libext2fs in e2fsprogs before 1.40.3 allow user-assisted remote attackers to execute arbitrary code via a crafted filesystem image.
CVSS Details
- CVSS 3.1 Base Score: 5.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade e2fsprogs | Jul 30, 2024 | Dec 7, 2007 |
| Freebsd | — | Upgrade e2fsprogs | Dec 10, 2025 | Dec 20, 2007 |
| Gentoo Linux | — | Upgrade sys-fs/e2fsprogs. | Oct 30, 2017 | Dec 7, 2007 |
| Oracle_linux | — | Upgrade e2fsprogs-libsUpgrade e2fsprogsUpgrade e2fsprogs-devel | Oct 16, 2024 | Dec 7, 2007 |
| Suse | — | Upgrade libext2fs-devel-32bitUpgrade libcom_err-devel-staticUpgrade libcom_err2Upgrade libcom_err-devel-32bitUpgrade libext2fs-devel-staticUpgrade libcom_err2-32bitUpgrade libext2fs-develUpgrade libcom_err2-x86Upgrade libext2fs2-x86Upgrade libext2fs2Upgrade e2fsprogs-develUpgrade e2fsprogsUpgrade e2fsprogs-scrubUpgrade fuse2fsUpgrade libext2fs2-32bitUpgrade libcom_err-devel | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade e2fslibs | Nov 8, 2024 | Dec 7, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub