An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libss-develUpgrade e2fsprogs-develUpgrade libssUpgrade e2fsprogsUpgrade libcom_err-develUpgrade libcom_errUpgrade e2fsprogs-libs | Nov 14, 2022 | Apr 14, 2022 |
| Alpine Linux | — | Upgrade e2fsprogs | Mar 26, 2024 | Apr 14, 2022 |
| Amazon Linux Ami 2 | — | Upgrade libcom_errUpgrade libssUpgrade e2fsprogs-libsUpgrade e2fsprogsUpgrade libcom_err-develUpgrade e2fsprogs-staticUpgrade e2fsprogs-debuginfoUpgrade libss-develUpgrade e2fsprogs-devel | Dec 7, 2022 | Apr 14, 2022 |
| Amazon_linux_2023 | — | Upgrade e2fsprogs-develUpgrade libcom_err-develUpgrade e2fsprogs-libsUpgrade e2scrubUpgrade e2fsprogs-libs-debuginfoUpgrade libcom_errUpgrade libss-debuginfoUpgrade libssUpgrade e2fsprogs-debuginfoUpgrade e2fsprogs-staticUpgrade libss-develUpgrade e2fsprogsUpgrade libcom_err-debuginfoUpgrade e2fsprogs-debugsource | Feb 17, 2025 | Mar 24, 2022 |
| Centos_linux | — | Upgrade libcom_errUpgrade e2fsprogs-develUpgrade e2fsprogs-debugsourceUpgrade libcom_err-develUpgrade e2fsprogs-libsUpgrade libcom_err-debuginfoUpgrade e2fsprogs-libs-debuginfoUpgrade e2fsprogs-debuginfoUpgrade e2fsprogsUpgrade libss-debuginfoUpgrade libss | Nov 9, 2022 | Apr 14, 2022 |
| Debian | — | Upgrade e2fsprogs | Jul 30, 2024 | Apr 14, 2022 |
| Freebsd | — | Upgrade e2fsprogs-nobootfsckUpgrade e2fsprogsUpgrade e2fsprogs-roothardlinks | Nov 4, 2022 | Jun 5, 2022 |
| Gentoo Linux | — | Upgrade sys-fs/e2fsprogs. | Feb 19, 2024 | Apr 14, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade e2fsprogs | Nov 3, 2022 | Apr 14, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade e2fsprogs-develUpgrade e2fsprogs-libsUpgrade e2fsprogs | Oct 28, 2022 | Apr 14, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libcom_errUpgrade e2fsprogs-develUpgrade e2fsprogsUpgrade libssUpgrade e2fsprogs-libsUpgrade libcom_err-devel | Jun 17, 2022 | Apr 14, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libssUpgrade e2fsprogsUpgrade e2fsprogs-libsUpgrade libcom_errUpgrade libcom_err-develUpgrade e2fsprogs-devel | Apr 13, 2023 | Apr 14, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade e2fsprogs | Mar 9, 2023 | Apr 14, 2022 |
| Oracle_linux | — | Upgrade libcom_errUpgrade e2fsprogs-staticUpgrade e2fsprogs-develUpgrade e2fsprogsUpgrade e2fsprogs-libsUpgrade libcom_err-develUpgrade libssUpgrade libss-devel | Nov 16, 2022 | Mar 24, 2022 |
| Redhat_linux | — | Upgrade libcom_err-develUpgrade libcom_errUpgrade e2fsprogs-libs-debuginfoUpgrade libssNo solution existsUpgrade libss-debuginfoUpgrade e2fsprogs-libsUpgrade e2fsprogs-debuginfoUpgrade e2fsprogsUpgrade e2fsprogs-debugsourceUpgrade e2fsprogs-develUpgrade libcom_err-debuginfoUpgrade libss-devel | Nov 9, 2022 | Apr 14, 2022 |
| Rocky_linux | — | Upgrade libcom_err-debuginfoUpgrade e2fsprogs-debugsourceUpgrade libssUpgrade e2fsprogsUpgrade libcom_err-develUpgrade e2fsprogs-debuginfoUpgrade libcom_errUpgrade libss-debuginfoUpgrade e2fsprogs-libsUpgrade e2fsprogs-develUpgrade libss-develUpgrade e2fsprogs-libs-debuginfo | Mar 12, 2024 | Apr 14, 2022 |
| Suse | — | Upgrade libcom_err2Upgrade libext2fs-devel-32bitUpgrade libext2fs-develUpgrade e2fsprogs-develUpgrade libcom_err-devel-staticUpgrade e2fsprogs-scrubUpgrade libext2fs-devel-staticUpgrade libcom_err2-32bitUpgrade libext2fs2Upgrade libcom_err-devel-32bitUpgrade libcom_err-develUpgrade libext2fs2-32bitUpgrade e2fsprogs | Oct 26, 2022 | Apr 14, 2022 |
| Ubuntu | — | Upgrade e2fsprogs (Ubuntu Pro)Upgrade e2fsck-static (Ubuntu Pro)Upgrade e2fsck-staticUpgrade fuse2fsUpgrade e2fslibs (Ubuntu Pro)Upgrade e2fsprogs | Jun 8, 2022 | Apr 14, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 14, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub