ALT Linux Team

Package e2fsprogs update in c6 on 2015-12-25

ALT-PU-2015-2182-1

Package e2fsprogs updated to version 1.41.14-alt1.M60C.2 for branch c6 in task 153459.

Closed vulnerabilities

Published: 2015-02-17
Modified: 2024-11-21

CVE-2015-0247

Heap-based buffer overflow in openfs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code via crafted block group descriptor data in a filesystem image.

Severity: MEDIUM (4.6)
References:
Published: 2015-02-24
Modified: 2024-11-21

CVE-2015-1572

Heap-based buffer overflow in closefs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code by causing a crafted block group descriptor to be marked as dirty. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0247.

Severity: MEDIUM (4.6)
References:
VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.0
Back to top