CVE-2022-1304

Опубликовано: 14 апр. 2022

Источник: nvd

CVSS3: 7.8

CVSS2: 6.8

EPSS Низкий

Описание

An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.

Ссылки

https://bugzilla.redhat.com/show_bug.cgi?id=2069726
Issue Tracking
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2069726
Issue Tracking
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2024/10/msg00001.html
https://security.netapp.com/advisory/ntap-20241122-0010/

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:e2fsprogs_project:e2fsprogs:1.46.5:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*

Конфигурация 3

cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*

EPSS

Процентиль: 65%

0.00505

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-125

Связанные уязвимости

CVE-2022-1304

CVSS3: 7.8

ubuntu

около 3 лет назад

An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.

CVE-2022-1304

CVSS3: 5.8

redhat

около 3 лет назад

An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.

CVE-2022-1304

CVSS3: 7.8

msrc

около 3 лет назад

Описание отсутствует

CVE-2022-1304

CVSS3: 7.8

debian

около 3 лет назад

An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46. ...

SUSE-SU-2022:1718-1

suse-cvrf

около 3 лет назад

Security update for e2fsprogs

EPSS

Процентиль: 65%

0.00505

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-125