Orta CVSS 6.7 PoC var
CVE-2019-5188: E2fsprogs: sınır dışı yazma
Açıklama (NVD)
A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.
Özet bilgiler
- Ürün
- E2fsprogs Project E2fsprogs
- CVSS v3.1
- 6.7
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - EPSS
- %1,08 (yüzdelik 65)
- CWE
- CWE-787
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| e2fsprogs-project-e2fsprogs | 1.43.3 | 1.45.4 | — |
| fedoraproject-fedora | 30 | 30 | — |
| fedoraproject-fedora | 31 | 31 | — |
| debian-debian-linux | 8.0 | 8.0 | — |
| debian-debian-linux | 9.0 | 9.0 | — |
| canonical-ubuntu-linux | 12.04 | 12.04 | — |
| canonical-ubuntu-linux | 14.04 | 14.04 | — |
| canonical-ubuntu-linux | 16.04 | 16.04 | — |
| canonical-ubuntu-linux | 18.04 | 18.04 | — |
| canonical-ubuntu-linux | 19.04 | 19.04 | — |
| canonical-ubuntu-linux | 19.10 | 19.10 | — |
| opensuse-leap | 15.1 | 15.1 | — |
| netapp-hci-compute-node-firmware | — | — | — |
| netapp-solidfire-enterprise-sds-hci-storage-node | — | — | — |
Kaynaklar
- NVD kaydı
- lists.opensuse.org
- lists.debian.org
- lists.debian.org
- lists.fedoraproject.org
- lists.fedoraproject.org
- security.netapp.com
- talosintelligence.com
- usn.ubuntu.com
- lists.opensuse.org
- lists.debian.org
- lists.debian.org
- lists.fedoraproject.org
- lists.fedoraproject.org
- security.netapp.com
- talosintelligence.com
- usn.ubuntu.com
- cert-portal.siemens.com
- CWE-787