E2fsprogs Project E2fsprogs — known CVE vulnerabilities

Every CVE whose affected-product data names E2fsprogs Project E2fsprogs, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2022-1304 — CVSS 7.8 (high): An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary…
• CVE-2019-5094 — CVSS 7.5 (high): An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3. A specially crafted ext4 partition…
• CVE-2019-5188 — CVSS 7.5 (high): A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4…
• CVE-2015-0247 — CVSS 4.6 (medium): Heap-based buffer overflow in openfs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code…
• CVE-2015-1572 — CVSS 4.6 (medium): Heap-based buffer overflow in closefs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code…