A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade e2fsprogs | Feb 7, 2020 | Jan 8, 2020 |
| Amazon Linux Ami 2 | — | Upgrade libssUpgrade e2fsprogsUpgrade libcom_err-develUpgrade e2fsprogs-staticUpgrade libcom_errUpgrade e2fsprogs-debuginfoUpgrade libss-develUpgrade e2fsprogs-develUpgrade e2fsprogs-libs | Oct 28, 2020 | Jan 8, 2020 |
| Amazon_linux | — | Upgrade e2fsprogs | Dec 19, 2020 | Jan 8, 2020 |
| Centos_linux | — | Upgrade libcom_err-debuginfoUpgrade e2fsprogs-develUpgrade e2fsprogs-debuginfoUpgrade e2fsprogs-staticUpgrade libcom_errUpgrade e2fsprogs-debugsourceUpgrade libss-develUpgrade e2fsprogsUpgrade libcom_err-develUpgrade e2fsprogs-libs-debuginfoUpgrade e2fsprogs-libsUpgrade libss-debuginfoUpgrade libss | Oct 1, 2020 | Jan 8, 2020 |
| Debian | — | Upgrade e2fsprogs | Mar 27, 2020 | Jan 8, 2020 |
| Freebsd | — | Upgrade e2fsprogs | Jan 12, 2020 | Jan 8, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade e2fsprogs-develUpgrade e2fsprogs-libsUpgrade libcom_err-develUpgrade e2fsprogsUpgrade libssUpgrade libcom_err | Jun 17, 2020 | Jan 8, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade e2fsprogs-libsUpgrade libssUpgrade libcom_err-develUpgrade e2fsprogsUpgrade e2fsprogs-develUpgrade libcom_err | Apr 16, 2020 | Jan 8, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade e2fsprogs-libsUpgrade libcom_errUpgrade e2fsprogs-develUpgrade libssUpgrade e2fsprogsUpgrade libcom_err-devel | Feb 24, 2020 | Jan 8, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade e2fsprogsUpgrade libcom_err-develUpgrade e2fsprogs-libsUpgrade libcom_errUpgrade libssUpgrade e2fsprogs-devel | Mar 24, 2020 | Jan 8, 2020 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 19, 2022 |
| Oracle_linux | — | Upgrade libssUpgrade e2fsprogs-libsUpgrade e2fsprogsUpgrade libcom_err-develUpgrade libcom_errUpgrade libss-develUpgrade e2fsprogs-staticUpgrade e2fsprogs-devel | Oct 7, 2020 | Jan 7, 2020 |
| Redhat_linux | — | Upgrade e2fsprogsUpgrade libss-debuginfoNo solution existsUpgrade libcom_err-develUpgrade e2fsprogs-libsUpgrade libssUpgrade libcom_errUpgrade libcom_err-debuginfoUpgrade e2fsprogs-libs-debuginfoUpgrade e2fsprogs-debugsourceUpgrade e2fsprogs-debuginfoUpgrade libss-develUpgrade e2fsprogs-develUpgrade e2fsprogs-static | Oct 1, 2020 | Jan 8, 2020 |
| Suse | — | Upgrade libext2fs2Upgrade libext2fs-devel-32bitUpgrade libext2fs2-32bitUpgrade libcom_err-devel-32bitUpgrade e2fsprogsUpgrade libext2fs-develUpgrade libcom_err-devel-staticUpgrade e2fsprogs-develUpgrade libcom_err-develUpgrade libcom_err2-32bitUpgrade libext2fs-devel-staticUpgrade libcom_err2 | Feb 5, 2020 | Jan 8, 2020 |
| Ubuntu | — | Upgrade e2fsprogsUpgrade e2fsprogs (Ubuntu Pro) | Jan 24, 2020 | Jan 8, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 8, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub