Heap-based buffer overflow in openfs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code via crafted block group descriptor data in a filesystem image.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade e2fsprogs | Aug 30, 2017 | Feb 17, 2015 |
| Debian | — | Upgrade e2fsprogs | Jul 30, 2024 | Feb 17, 2015 |
| Freebsd | — | Upgrade e2fsprogs | Dec 10, 2025 | Feb 24, 2015 |
| Gentoo Linux | — | Upgrade sys-fs/e2fsprogs. | Oct 30, 2017 | Feb 17, 2015 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libcom_errUpgrade libcom_err-develUpgrade e2fsprogs-develUpgrade e2fsprogs-libsUpgrade e2fsprogsUpgrade libss | Nov 30, 2017 | Feb 17, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 5, 2015 |
| Suse | — | Upgrade e2fsprogsUpgrade libext2fs-devel-32bitUpgrade libcom_err2-x86Upgrade libcom_err-develUpgrade libblkid-develUpgrade libext2fs-develUpgrade libcom_err2Upgrade libuuid1-32bitUpgrade libblkid1-x86Upgrade libext2fs2-32bitUpgrade libuuid-devel-32bitUpgrade libblkid-devel-32bitUpgrade libblkid1Upgrade libext2fs2-x86Upgrade libcom_err2-32bitUpgrade libuuid1Upgrade libcom_err-devel-32bitUpgrade libcom_err-devel-staticUpgrade libext2fs2Upgrade libuuid1-x86Upgrade libext2fs-devel-staticUpgrade e2fsprogs-develUpgrade uuid-runtimeUpgrade libblkid1-32bitUpgrade libuuid-devel | Dec 18, 2015 | Feb 17, 2015 |
| Ubuntu | — | Upgrade e2fsprogs | Nov 8, 2024 | Feb 17, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub