CVE-2019-5188
High
Description
A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.
SeverityHigh
CVSS7.5
Exploit probability—
Product
E2fsprogs
PublishedJan 8, 2020
First seenJan 8, 2020
Weakness typeCWE-787Out-of-bounds write
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| e2fsprogs_project e2fsprogs | 1.43.3 ≤ v ≤ 1.45.4 | — |
| fedoraproject fedora | 30, 31 | — |
| debian debian_linux | 8.0, 9.0 | — |
| canonical ubuntu_linux | 12.04, 14.04, 16.04, 18.04, 19.04, 19.10 | — |
| opensuse leap | 15.1 | — |
| netapp hci_compute_node_firmware | No range specified | — |
| netapp solidfire\,_enterprise_sds_\&_hci_storage_node | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.