IM
IronMonkey Threat Research

CVE-2022-1304 HIGH

Published: 2022-04-14 | Last Modified: 2025-04-23 | Status: Modified

Description

An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.

Additional Descriptions (1)

Se ha encontrado una vulnerabilidad de lectura/escritura fuera de límites en e2fsprogs versión 1.46.5. Este problema conlleva a un fallo de segmentación y posiblemente una ejecución de código arbitrario por medio de un sistema de archivos especialmente diseñado

CVSS Metrics

Base Score: 7.8 (HIGH)

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionREQUIRED
ScopeUNCHANGED
Confidentiality ImpactHIGH
Integrity ImpactHIGH
Availability ImpactHIGH

Source: [email protected]

Type: Primary

Exploitability Score: 1.8

Impact Score: 5.9

Base Score: 6.8 (MEDIUM)

AV:N/AC:M/Au:N/C:P/I:P/A:P

Access VectorNETWORK
Access ComplexityMEDIUM
AuthenticationNONE
Confidentiality ImpactPARTIAL
Integrity ImpactPARTIAL
Availability ImpactPARTIAL

Source: [email protected]

Type: Primary

Exploitability Score: 8.6

Impact Score: 6.4

Weaknesses

Source Type Description
[email protected] Secondary
en CWE-125
[email protected] Secondary
en CWE-125
en CWE-787

Affected Products

Vendor Product Version Update Type
e2fsprogs_project e2fsprogs 1.46.5 <built-in method update of dict object at 0x7fd37039a9c0> Application
redhat enterprise_linux 6.0 <built-in method update of dict object at 0x7fd3855da200> Operating System
redhat enterprise_linux 7.0 <built-in method update of dict object at 0x7fd2d39ffa40> Operating System
redhat enterprise_linux 8.0 <built-in method update of dict object at 0x7fd2db218800> Operating System
fedoraproject fedora 35 <built-in method update of dict object at 0x7fd37039a680> Operating System

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:e2fsprogs_project:e2fsprogs:1.46.5:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*

References