A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade e2fsprogs | Feb 7, 2020 | Jan 8, 2020 |
| Amazon Linux Ami 2 | — | Upgrade e2fsprogs-develUpgrade libss-develUpgrade e2fsprogs-libsUpgrade libcom_err-develUpgrade e2fsprogsUpgrade libssUpgrade e2fsprogs-staticUpgrade e2fsprogs-debuginfoUpgrade libcom_err | Oct 28, 2020 | Jan 8, 2020 |
| Amazon_linux | — | Upgrade e2fsprogs | Dec 19, 2020 | Jan 8, 2020 |
| Centos_linux | — | Upgrade libcom_errUpgrade libcom_err-debuginfoUpgrade e2fsprogs-debuginfoUpgrade e2fsprogs-develUpgrade e2fsprogs-staticUpgrade e2fsprogs-debugsourceUpgrade libcom_err-develUpgrade e2fsprogsUpgrade libssUpgrade libss-debuginfoUpgrade libss-develUpgrade e2fsprogs-libsUpgrade e2fsprogs-libs-debuginfo | Oct 1, 2020 | Jan 8, 2020 |
| Debian | — | Upgrade e2fsprogs | Mar 27, 2020 | Jan 8, 2020 |
| Freebsd | — | Upgrade e2fsprogs | Jan 12, 2020 | Jan 8, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade e2fsprogs-libsUpgrade libcom_err-develUpgrade e2fsprogs-develUpgrade libssUpgrade libcom_errUpgrade e2fsprogs | Jun 17, 2020 | Jan 8, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libcom_errUpgrade libcom_err-develUpgrade libssUpgrade e2fsprogsUpgrade e2fsprogs-libsUpgrade e2fsprogs-devel | Apr 16, 2020 | Jan 8, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade e2fsprogsUpgrade libcom_err-develUpgrade libssUpgrade e2fsprogs-develUpgrade libcom_errUpgrade e2fsprogs-libs | Feb 24, 2020 | Jan 8, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade e2fsprogs-libsUpgrade e2fsprogsUpgrade libcom_err-develUpgrade libcom_errUpgrade e2fsprogs-develUpgrade libss | Mar 24, 2020 | Jan 8, 2020 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 19, 2022 |
| Oracle_linux | — | Upgrade libssUpgrade e2fsprogs-libsUpgrade e2fsprogsUpgrade libcom_err-develUpgrade libcom_errUpgrade e2fsprogs-develUpgrade libss-develUpgrade e2fsprogs-static | Oct 7, 2020 | Jan 7, 2020 |
| Redhat_linux | — | Upgrade e2fsprogsUpgrade libss-debuginfoUpgrade libcom_err-develUpgrade libssUpgrade libcom_errUpgrade e2fsprogs-libsNo solution existsUpgrade e2fsprogs-develUpgrade e2fsprogs-libs-debuginfoUpgrade libcom_err-debuginfoUpgrade e2fsprogs-staticUpgrade e2fsprogs-debuginfoUpgrade libss-develUpgrade e2fsprogs-debugsource | Oct 1, 2020 | Jan 8, 2020 |
| Suse | — | Upgrade libext2fs2Upgrade libext2fs-devel-32bitUpgrade libext2fs2-32bitUpgrade libcom_err-devel-32bitUpgrade libcom_err2-32bitUpgrade libext2fs-devel-staticUpgrade libcom_err-devel-staticUpgrade libcom_err-develUpgrade e2fsprogsUpgrade e2fsprogs-develUpgrade libcom_err2Upgrade libext2fs-devel | Feb 5, 2020 | Jan 8, 2020 |
| Ubuntu | — | Upgrade e2fsprogs (Ubuntu Pro)Upgrade e2fsprogs | Jan 24, 2020 | Jan 8, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 8, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub