All errata/sisyphus/ALT-PU-2015-2007-1
ALT-PU-2015-2007-1

Package update e2fsprogs in branch sisyphus

Version1.42.13-alt1
Task#153403
Published2015-11-17
Max severityMEDIUM
Severity:

Closed issues (2)

CVE-2015-0247
MEDIUM4.6

Heap-based buffer overflow in openfs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code via crafted block group descriptor data in a filesystem image.

Published: 2015-02-17Modified: 2025-04-12
CVSS 2.0MEDIUM 4.6
CVSS:2.0/AV:L/AC:L/Au:N/C:P/I:P/A:P
References
CVE-2015-1572
MEDIUM4.6

Heap-based buffer overflow in closefs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code by causing a crafted block group descriptor to be marked as dirty. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0247.

Published: 2015-02-24Modified: 2025-04-12
CVSS 2.0MEDIUM 4.6
CVSS:2.0/AV:L/AC:L/Au:N/C:P/I:P/A:P
References