CVE-2019-5094
PoC —CVSS 3.1
7.5 high
EPSS
1%p64
Published
()
Modified
Description
An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3. A specially crafted ext4 partition can cause an out-of-bounds write on the heap, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.
- Vendors
- e2fsprogs projectdebianfedoraprojectcanonicalnetapp
- Products
- e2fsprogs, debian linux, fedora, ubuntu linux, hci management node, solidfire
- Weakness
- CWE-787
- Vector
- CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.