Yüksek CVSS 7.5 PoC var
CVE-2019-5094: E2fsprogs: sınır dışı yazma
Açıklama (NVD)
An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3. A specially crafted ext4 partition can cause an out-of-bounds write on the heap, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.
Özet bilgiler
- Ürün
- E2fsprogs Project E2fsprogs
- CVSS v3.1
- 7.5
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H - EPSS
- %1,11 (yüzdelik 66)
- CWE
- CWE-787
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| e2fsprogs-project-e2fsprogs | 1.43.3 | 1.45.3 | — |
| debian-debian-linux | 8.0 | 8.0 | — |
| debian-debian-linux | 9.0 | 9.0 | — |
| debian-debian-linux | 10.0 | 10.0 | — |
| fedoraproject-fedora | 30 | 30 | — |
| fedoraproject-fedora | 31 | 31 | — |
| canonical-ubuntu-linux | 12.04 | 12.04 | — |
| canonical-ubuntu-linux | 14.04 | 14.04 | — |
| canonical-ubuntu-linux | 16.04 | 16.04 | — |
| canonical-ubuntu-linux | 18.04 | 18.04 | — |
| canonical-ubuntu-linux | 19.04 | 19.04 | — |
| netapp-hci-management-node | — | — | — |
| netapp-solidfire | — | — | — |
Kaynaklar
- NVD kaydı
- lists.debian.org
- lists.fedoraproject.org
- lists.fedoraproject.org
- seclists.org
- security.gentoo.org
- security.netapp.com
- talosintelligence.com
- usn.ubuntu.com
- usn.ubuntu.com
- www.debian.org
- lists.debian.org
- lists.fedoraproject.org
- lists.fedoraproject.org
- seclists.org
- security.gentoo.org
- security.netapp.com
- talosintelligence.com
- usn.ubuntu.com
- usn.ubuntu.com
- www.debian.org
- cert-portal.siemens.com
- CWE-787