Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2022:1652-1

Опубликовано: 12 мая 2022
Источник: suse-cvrf

Описание

Security update for e2fsprogs

This update for e2fsprogs fixes the following issues:

  • CVE-2022-1304: Fixed out-of-bounds read/write leading to segmentation fault and possibly arbitrary code execution. (bsc#1198446)

Список пакетов

Container suse/sles12sp3:latest
libcom_err2-1.42.11-16.9.1
HPE Helion OpenStack 8
e2fsprogs-1.42.11-16.9.1
libcom_err2-1.42.11-16.9.1
libcom_err2-32bit-1.42.11-16.9.1
libext2fs2-1.42.11-16.9.1
SUSE Linux Enterprise Server 12 SP2-BCL
e2fsprogs-1.42.11-16.9.1
libcom_err2-1.42.11-16.9.1
libcom_err2-32bit-1.42.11-16.9.1
libext2fs2-1.42.11-16.9.1
SUSE Linux Enterprise Server 12 SP3-BCL
e2fsprogs-1.42.11-16.9.1
libcom_err2-1.42.11-16.9.1
libcom_err2-32bit-1.42.11-16.9.1
libext2fs2-1.42.11-16.9.1
SUSE Linux Enterprise Server 12 SP3-LTSS
e2fsprogs-1.42.11-16.9.1
libcom_err2-1.42.11-16.9.1
libcom_err2-32bit-1.42.11-16.9.1
libext2fs2-1.42.11-16.9.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
e2fsprogs-1.42.11-16.9.1
libcom_err2-1.42.11-16.9.1
libcom_err2-32bit-1.42.11-16.9.1
libext2fs2-1.42.11-16.9.1
SUSE OpenStack Cloud 8
e2fsprogs-1.42.11-16.9.1
libcom_err2-1.42.11-16.9.1
libcom_err2-32bit-1.42.11-16.9.1
libext2fs2-1.42.11-16.9.1
SUSE OpenStack Cloud Crowbar 8
e2fsprogs-1.42.11-16.9.1
libcom_err2-1.42.11-16.9.1
libcom_err2-32bit-1.42.11-16.9.1
libext2fs2-1.42.11-16.9.1

Описание

An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.


Затронутые продукты
Container suse/sles12sp3:latest:libcom_err2-1.42.11-16.9.1
HPE Helion OpenStack 8:e2fsprogs-1.42.11-16.9.1
HPE Helion OpenStack 8:libcom_err2-1.42.11-16.9.1
HPE Helion OpenStack 8:libcom_err2-32bit-1.42.11-16.9.1

Ссылки