An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libcom_err-develUpgrade libssUpgrade e2fsprogsUpgrade e2fsprogs-libsUpgrade libcom_errUpgrade e2fsprogs-develUpgrade libss-devel | Nov 14, 2022 | Apr 14, 2022 |
| Alpine Linux | — | Upgrade e2fsprogs | Mar 26, 2024 | Apr 14, 2022 |
| Amazon Linux Ami 2 | — | Upgrade libcom_errUpgrade libcom_err-develUpgrade e2fsprogs-staticUpgrade e2fsprogs-debuginfoUpgrade libss-develUpgrade e2fsprogs-libsUpgrade e2fsprogsUpgrade libssUpgrade e2fsprogs-devel | Dec 7, 2022 | Apr 14, 2022 |
| Amazon_linux_2023 | — | Upgrade libss-develUpgrade e2fsprogs-debugsourceUpgrade e2fsprogsUpgrade libssUpgrade e2fsprogs-debuginfoUpgrade libcom_err-debuginfoUpgrade e2fsprogs-staticUpgrade e2scrubUpgrade libss-debuginfoUpgrade libcom_errUpgrade libcom_err-develUpgrade e2fsprogs-develUpgrade e2fsprogs-libs-debuginfoUpgrade e2fsprogs-libs | Feb 17, 2025 | Mar 24, 2022 |
| Centos_linux | — | Upgrade e2fsprogs-debugsourceUpgrade e2fsprogs-develUpgrade libcom_errUpgrade libcom_err-develUpgrade e2fsprogs-libs-debuginfoUpgrade e2fsprogs-debuginfoUpgrade libcom_err-debuginfoUpgrade e2fsprogsUpgrade libss-debuginfoUpgrade e2fsprogs-libsUpgrade libss | Nov 9, 2022 | Apr 14, 2022 |
| Debian | — | Upgrade e2fsprogs | Jul 30, 2024 | Apr 14, 2022 |
| Freebsd | — | Upgrade e2fsprogsUpgrade e2fsprogs-roothardlinksUpgrade e2fsprogs-nobootfsck | Nov 4, 2022 | Jun 5, 2022 |
| Gentoo Linux | — | Upgrade sys-fs/e2fsprogs. | Feb 19, 2024 | Apr 14, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade e2fsprogs | Nov 3, 2022 | Apr 14, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade e2fsprogsUpgrade e2fsprogs-libsUpgrade e2fsprogs-devel | Oct 28, 2022 | Apr 14, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade e2fsprogs-develUpgrade libcom_errUpgrade libcom_err-develUpgrade e2fsprogsUpgrade e2fsprogs-libsUpgrade libss | Jun 17, 2022 | Apr 14, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade e2fsprogs-develUpgrade e2fsprogsUpgrade libcom_err-develUpgrade libssUpgrade libcom_errUpgrade e2fsprogs-libs | Apr 13, 2023 | Apr 14, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade e2fsprogs | Mar 9, 2023 | Apr 14, 2022 |
| Oracle_linux | — | Upgrade e2fsprogs-libsUpgrade libcom_err-develUpgrade libssUpgrade e2fsprogsUpgrade libss-develUpgrade e2fsprogs-develUpgrade libcom_errUpgrade e2fsprogs-static | Nov 16, 2022 | Mar 24, 2022 |
| Redhat_linux | — | Upgrade e2fsprogsNo solution existsUpgrade e2fsprogs-libs-debuginfoUpgrade libcom_err-develUpgrade libssUpgrade libss-debuginfoUpgrade e2fsprogs-libsUpgrade libcom_errUpgrade e2fsprogs-debuginfoUpgrade e2fsprogs-develUpgrade libcom_err-debuginfoUpgrade libss-develUpgrade e2fsprogs-debugsource | Nov 9, 2022 | Apr 14, 2022 |
| Rocky_linux | — | Upgrade libssUpgrade e2fsprogs-debuginfoUpgrade e2fsprogs-libsUpgrade e2fsprogs-debugsourceUpgrade e2fsprogsUpgrade libcom_err-develUpgrade libcom_errUpgrade libss-debuginfoUpgrade libcom_err-debuginfoUpgrade e2fsprogs-libs-debuginfoUpgrade e2fsprogs-develUpgrade libss-devel | Mar 12, 2024 | Apr 14, 2022 |
| Suse | — | Upgrade libext2fs-develUpgrade e2fsprogs-scrubUpgrade libcom_err2-32bitUpgrade libext2fs-devel-32bitUpgrade libext2fs-devel-staticUpgrade libcom_err-devel-staticUpgrade libcom_err2Upgrade e2fsprogs-develUpgrade e2fsprogsUpgrade libext2fs2Upgrade libext2fs2-32bitUpgrade libcom_err-devel-32bitUpgrade libcom_err-devel | Oct 26, 2022 | Apr 14, 2022 |
| Ubuntu | — | Upgrade fuse2fsUpgrade e2fsprogsUpgrade e2fslibs (Ubuntu Pro)Upgrade e2fsprogs (Ubuntu Pro)Upgrade e2fsck-staticUpgrade e2fsck-static (Ubuntu Pro) | Jun 8, 2022 | Apr 14, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 14, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub