A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.
Existe una vulnerabilidad de ejecución de código en la funcionalidad directory rehashing de E2fsprogs e2fsck versión 1.45.4. Un directorio ext4 especialmente diseñado puede causar una escritura fuera de límites en la pila, resultando en una ejecución de código. Un atacante puede corromper una partición para desencadenar esta vulnerabilidad.
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
| Attack Vector | LOCAL |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | HIGH |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | HIGH |
| Integrity Impact | HIGH |
| Availability Impact | HIGH |
AV:L/AC:M/Au:N/C:P/I:P/A:P
| Access Vector | LOCAL |
|---|---|
| Access Complexity | MEDIUM |
| Authentication | NONE |
| Confidentiality Impact | PARTIAL |
| Integrity Impact | PARTIAL |
| Availability Impact | PARTIAL |
| Source | Type | Description |
|---|---|---|
| [email protected] | Secondary |
en
CWE-787
|
| [email protected] | Primary |
en
CWE-787
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| e2fsprogs_project | e2fsprogs | * | <built-in method update of dict object at 0x7fd3423d8bc0> | Application |
| fedoraproject | fedora | 30 | <built-in method update of dict object at 0x7fd3423da880> | Operating System |
| fedoraproject | fedora | 31 | <built-in method update of dict object at 0x7fd30864ff80> | Operating System |
| debian | debian_linux | 8.0 | <built-in method update of dict object at 0x7fd2d3af5480> | Operating System |
| debian | debian_linux | 9.0 | <built-in method update of dict object at 0x7fd3423db580> | Operating System |
| canonical | ubuntu_linux | 12.04 | <built-in method update of dict object at 0x7fd3423d9080> | Operating System |
| canonical | ubuntu_linux | 14.04 | <built-in method update of dict object at 0x7fd3423d9500> | Operating System |
| canonical | ubuntu_linux | 16.04 | <built-in method update of dict object at 0x7fd3423db600> | Operating System |
| canonical | ubuntu_linux | 18.04 | <built-in method update of dict object at 0x7fd3423da840> | Operating System |
| canonical | ubuntu_linux | 19.04 | <built-in method update of dict object at 0x7fd3423db880> | Operating System |
| canonical | ubuntu_linux | 19.10 | <built-in method update of dict object at 0x7fd342b3bdc0> | Operating System |
| opensuse | leap | 15.1 | <built-in method update of dict object at 0x7fd3423d9b80> | Operating System |
| netapp | hci_compute_node_firmware | - | <built-in method update of dict object at 0x7fd39c4df740> | Operating System |
| netapp | solidfire\,_enterprise_sds_\&_hci_storage_node | - | <built-in method update of dict object at 0x7fd2983c78c0> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:e2fsprogs_project:e2fsprogs:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:* |
| Yes | cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:* |
| Yes | cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* |
| Yes | cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* |
| Yes | cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:netapp:hci_compute_node_firmware:-:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| No | cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:netapp:solidfire\,_enterprise_sds_\&_hci_storage_node:-:*:*:*:*:*:*:* |