An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade e2fsprogs-libsUpgrade libssUpgrade e2fsprogsUpgrade libcom_errUpgrade libcom_err-develUpgrade e2fsprogs-develUpgrade libss-devel | Nov 14, 2022 | Apr 14, 2022 |
| Alpine Linux | — | Upgrade e2fsprogs | Mar 26, 2024 | Apr 14, 2022 |
| Amazon Linux Ami 2 | — | Upgrade libss-develUpgrade e2fsprogs-staticUpgrade libcom_err-develUpgrade e2fsprogs-develUpgrade e2fsprogs-debuginfoUpgrade e2fsprogsUpgrade libssUpgrade e2fsprogs-libsUpgrade libcom_err | Dec 7, 2022 | Apr 14, 2022 |
| Amazon_linux_2023 | — | Upgrade libss-develUpgrade e2fsprogs-staticUpgrade libcom_err-debuginfoUpgrade e2fsprogsUpgrade libssUpgrade e2fsprogs-debugsourceUpgrade e2fsprogs-debuginfoUpgrade e2fsprogs-develUpgrade libcom_err-develUpgrade e2fsprogs-libsUpgrade libcom_errUpgrade libss-debuginfoUpgrade e2fsprogs-libs-debuginfoUpgrade e2scrub | Feb 17, 2025 | Mar 24, 2022 |
| Centos_linux | — | Upgrade libcom_err-debuginfoUpgrade libssUpgrade e2fsprogs-libsUpgrade libss-debuginfoUpgrade libcom_err-develUpgrade e2fsprogsUpgrade e2fsprogs-debuginfoUpgrade e2fsprogs-libs-debuginfoUpgrade e2fsprogs-develUpgrade e2fsprogs-debugsourceUpgrade libcom_err | Nov 9, 2022 | Apr 14, 2022 |
| Debian | — | Upgrade e2fsprogs | Jul 30, 2024 | Apr 14, 2022 |
| Freebsd | — | Upgrade e2fsprogs-nobootfsckUpgrade e2fsprogsUpgrade e2fsprogs-roothardlinks | Nov 4, 2022 | Jun 5, 2022 |
| Gentoo Linux | — | Upgrade sys-fs/e2fsprogs. | Feb 19, 2024 | Apr 14, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade e2fsprogs | Nov 3, 2022 | Apr 14, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade e2fsprogs-develUpgrade e2fsprogsUpgrade e2fsprogs-libs | Oct 28, 2022 | Apr 14, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libcom_err-develUpgrade e2fsprogsUpgrade libssUpgrade e2fsprogs-libsUpgrade e2fsprogs-develUpgrade libcom_err | Jun 17, 2022 | Apr 14, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libcom_err-develUpgrade libcom_errUpgrade e2fsprogs-libsUpgrade e2fsprogsUpgrade libssUpgrade e2fsprogs-devel | Apr 13, 2023 | Apr 14, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade e2fsprogs | Mar 9, 2023 | Apr 14, 2022 |
| Oracle_linux | — | Upgrade e2fsprogs-develUpgrade libcom_errUpgrade e2fsprogs-staticUpgrade libssUpgrade libcom_err-develUpgrade e2fsprogs-libsUpgrade e2fsprogsUpgrade libss-devel | Nov 16, 2022 | Mar 24, 2022 |
| Redhat_linux | — | No solution existsUpgrade e2fsprogs-debuginfoUpgrade libcom_errUpgrade e2fsprogs-libsUpgrade libss-debuginfoUpgrade e2fsprogs-libs-debuginfoUpgrade e2fsprogsUpgrade libssUpgrade libcom_err-develUpgrade libss-develUpgrade libcom_err-debuginfoUpgrade e2fsprogs-debugsourceUpgrade e2fsprogs-devel | Nov 9, 2022 | Apr 14, 2022 |
| Rocky_linux | — | Upgrade e2fsprogs-debugsourceUpgrade libcom_errUpgrade e2fsprogs-libsUpgrade libcom_err-develUpgrade e2fsprogs-debuginfoUpgrade libssUpgrade e2fsprogsUpgrade libcom_err-debuginfoUpgrade libss-debuginfoUpgrade libss-develUpgrade e2fsprogs-libs-debuginfoUpgrade e2fsprogs-devel | Mar 12, 2024 | Apr 14, 2022 |
| Suse | — | Upgrade libext2fs2Upgrade e2fsprogsUpgrade libext2fs2-32bitUpgrade libcom_err-develUpgrade libcom_err-devel-32bitUpgrade e2fsprogs-develUpgrade libext2fs-devel-staticUpgrade libcom_err2-32bitUpgrade libext2fs-develUpgrade e2fsprogs-scrubUpgrade libcom_err-devel-staticUpgrade libext2fs-devel-32bitUpgrade libcom_err2 | Oct 26, 2022 | Apr 14, 2022 |
| Ubuntu | — | Upgrade e2fsck-static (Ubuntu Pro)Upgrade e2fsck-staticUpgrade e2fsprogs (Ubuntu Pro)Upgrade e2fsprogsUpgrade e2fslibs (Ubuntu Pro)Upgrade fuse2fs | Jun 8, 2022 | Apr 14, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 14, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub