7.5
High
CVE-2019-5188 A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4
Description
A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| E2fsprogs | Versions not published | |
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
References
- FEDORA-2020-a724cc7926 lists.fedoraproject.org
- USN-4249-1 usn.ubuntu.com
- FEDORA-2020-01ed02451f lists.fedoraproject.org
- openSUSE-SU-2020:0166 lists.opensuse.org
- [debian-lts-announce] 20200324 [SECURITY] [DLA 2156-1] e2fsprogs security update lists.debian.org
- [debian-lts-announce] 20200726 [SECURITY] [DLA 2290-1] e2fsprogs security update lists.debian.org
- talosintelligence.com talosintelligence.com
- security.netapp.com security.netapp.com
Timeline
- Published
- Last modified