CVE-2015-0247

EPSS 0.40%

e2fsprogs - security update

發布日:2015/2/17修改日:2026/4/28

也稱為:DEBIAN-CVE-2015-0247

描述

Heap-based buffer overflow in openfs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code via crafted block group descriptor data in a filesystem image.

受影響套件(3)

Debian/e2fsprogsfrom 0, < 1.42.12-1
Debian/e2fsprogsfrom 0, < 1.41.12-4+deb6u1
Debian/e2fsprogsfrom 0, < 1.42.5-1.1+deb7u1

參考連結(1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2015-0247