An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3. A specially crafted ext4 partition can cause an out-of-bounds write on the heap, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.
Se presenta una vulnerabilidad de ejecución de código explotable en la funcionalidad quota file de E2fsprogs versión 1.45.3. Una partición ext4 especialmente diseñada puede causar una escritura fuera de límites en la pila, resultando en la ejecución de código. Un atacante puede corromper una partición para activar esta vulnerabilidad.
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
| Attack Vector | LOCAL |
|---|---|
| Attack Complexity | HIGH |
| Privileges Required | HIGH |
| User Interaction | NONE |
| Scope | CHANGED |
| Confidentiality Impact | HIGH |
| Integrity Impact | HIGH |
| Availability Impact | HIGH |
AV:L/AC:L/Au:N/C:P/I:P/A:P
| Access Vector | LOCAL |
|---|---|
| Access Complexity | LOW |
| Authentication | NONE |
| Confidentiality Impact | PARTIAL |
| Integrity Impact | PARTIAL |
| Availability Impact | PARTIAL |
| Source | Type | Description |
|---|---|---|
| [email protected] | Secondary |
en
CWE-787
|
| [email protected] | Secondary |
en
CWE-787
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | Secondary |
en
CWE-787
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| e2fsprogs_project | e2fsprogs | * | <built-in method update of dict object at 0x7fd3423dacc0> | Application |
| debian | debian_linux | 8.0 | <built-in method update of dict object at 0x7fd3423da840> | Operating System |
| debian | debian_linux | 9.0 | <built-in method update of dict object at 0x7fd36beb2d00> | Operating System |
| debian | debian_linux | 10.0 | <built-in method update of dict object at 0x7fd34178ba80> | Operating System |
| fedoraproject | fedora | 30 | <built-in method update of dict object at 0x7fd3423da900> | Operating System |
| fedoraproject | fedora | 31 | <built-in method update of dict object at 0x7fd3423d81c0> | Operating System |
| canonical | ubuntu_linux | 12.04 | <built-in method update of dict object at 0x7fd3408ca340> | Operating System |
| canonical | ubuntu_linux | 14.04 | <built-in method update of dict object at 0x7fd3855c1d80> | Operating System |
| canonical | ubuntu_linux | 16.04 | <built-in method update of dict object at 0x7fd385557440> | Operating System |
| canonical | ubuntu_linux | 18.04 | <built-in method update of dict object at 0x7fd3423dba80> | Operating System |
| canonical | ubuntu_linux | 19.04 | <built-in method update of dict object at 0x7fd34b97ae00> | Operating System |
| netapp | hci_management_node | - | <built-in method update of dict object at 0x7fd36b3e3200> | Application |
| netapp | solidfire | - | <built-in method update of dict object at 0x7fd34b97ab80> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:e2fsprogs_project:e2fsprogs:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:* |
| Yes | cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:* |
| Yes | cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* |
| Yes | cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* |
| Yes | cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:* |