Heap-based buffer overflow in closefs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code by causing a crafted block group descriptor to be marked as dirty. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0247.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade e2fsprogs | Jul 30, 2024 | Feb 24, 2015 |
| Freebsd | — | Upgrade e2fsprogs | Dec 10, 2025 | Feb 24, 2015 |
| Gentoo Linux | — | Upgrade sys-fs/e2fsprogs. | Oct 30, 2017 | Feb 24, 2015 |
| Huawei Euleros 2_0_sp1 | — | Upgrade e2fsprogsUpgrade libssUpgrade libcom_err-develUpgrade libcom_errUpgrade e2fsprogs-libsUpgrade e2fsprogs-devel | Nov 30, 2017 | Feb 24, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 11, 2015 |
| Suse | — | Upgrade e2fsprogs-develUpgrade libext2fs-devel-staticUpgrade libext2fs2-x86Upgrade libblkid1Upgrade uuid-runtimeUpgrade libblkid1-32bitUpgrade libuuid1-x86Upgrade libuuid-devel-32bitUpgrade libblkid-devel-32bitUpgrade libcom_err-devel-32bitUpgrade libuuid1-32bitUpgrade libcom_err-devel-staticUpgrade libuuid1Upgrade libext2fs-devel-32bitUpgrade libcom_err2Upgrade libcom_err-develUpgrade libcom_err2-x86Upgrade libext2fs2-32bitUpgrade libblkid-develUpgrade libuuid-develUpgrade libcom_err2-32bitUpgrade libext2fs-develUpgrade e2fsprogsUpgrade libext2fs2Upgrade libblkid1-x86 | Dec 18, 2015 | Feb 24, 2015 |
| Ubuntu | — | Upgrade e2fsprogs | Nov 8, 2024 | Feb 24, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub