Approved changes feed: RSS · Atom
cpe:2.3:a:e2fsprogs_project:e2fsprogs:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | E2Fsprogs Project (acaa1a41-832e-5583-b189-43afc4f8d172) |
|---|---|
| Product | E2Fsprogs (9b81c32c-9fca-592b-8e84-fb6f892737eb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/e2fsprogs |
purl2cpe | 2026-06-01 10:10:55.266127 |
pkg:deb/ubuntu/e2fsprogs |
purl2cpe | 2026-06-01 10:10:55.266132 |
pkg:github/distrotech/e2fsprogs |
purl2cpe | 2026-06-01 10:10:55.266136 |
pkg:github/tytso/e2fsprogs |
purl2cpe | 2026-06-01 10:10:55.266141 |
pkg:rpm/centos/e2fsprogs |
purl2cpe | 2026-06-01 10:10:55.266145 |
pkg:rpm/fedora/e2fsprogs |
purl2cpe | 2026-06-01 10:10:55.266150 |
pkg:rpm/opensuse/e2fsprogs |
purl2cpe | 2026-06-01 10:10:55.266160 |
pkg:sourceforge/e2fsprogs |
purl2cpe | 2026-06-01 10:10:55.266164 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-5188 |
vulnerable | 2026-06-08 05:13:57.805996 |
Details available
HIGH (7.5)
A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.
Published: 2020-01-08T15:45:09.000Z
Updated: 2026-10-14T06:35:38.977Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-5094 |
vulnerable | 2026-06-08 05:13:57.683135 |
Details available
HIGH (7.5)
An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3. A specially crafted ext4 partition can cause an out-of-bounds write on the heap, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.
Published: 2019-09-24T21:21:27.000Z
Updated: 2026-10-14T06:35:37.415Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-1572 |
vulnerable | 2026-06-08 05:06:25.872725 |
Details available
Heap-based buffer overflow in closefs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code by causing a crafted block group descriptor to be marked as dirty. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0247.
Published: 2015-02-24T15:00:00.000Z
Updated: 2024-08-06T04:47:16.926Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0247 |
vulnerable | 2026-06-08 05:06:14.124078 |
Details available
Heap-based buffer overflow in openfs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code via crafted block group descriptor data in a filesystem image.
Published: 2015-02-17T15:00:00.000Z
Updated: 2024-08-06T04:03:10.673Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.