Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2022-1304

Опубликовано: 14 апр. 2022
Источник: debian
EPSS Низкий

Описание

An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
e2fsprogsfixed1.46.6~rc1-1package
e2fsprogsno-dsabusterpackage
e2fsprogsno-dsastretchpackage

Примечания

  • https://bugzilla.redhat.com/show_bug.cgi?id=2069726

  • https://bugzilla.redhat.com/show_bug.cgi?id=2068113

  • https://lore.kernel.org/linux-ext4/20220421173148.20193-1-lczerner@redhat.com/T/#u

  • Fixed by: https://git.kernel.org/pub/scm/fs/ext2/e2fsprogs.git/commit/?h=maint&id=ab51d587bb9b229b1fade1afd02e1574c1ba5c76

EPSS

Процентиль: 65%
0.00505
Низкий

Связанные уязвимости

CVSS3: 7.8
ubuntu
около 3 лет назад

An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.

CVSS3: 5.8
redhat
около 3 лет назад

An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.

CVSS3: 7.8
nvd
около 3 лет назад

An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.

CVSS3: 7.8
msrc
около 3 лет назад

Описание отсутствует

suse-cvrf
около 3 лет назад

Security update for e2fsprogs

EPSS

Процентиль: 65%
0.00505
Низкий