CVE-2019-5094: system/e2fsprogs: buffer overflow in e2fsck quota handling
| Bugzilla ID | 204 |
| Alias(es) | CVE-2019-5094 |
| Reporter | Max Rees (sroracle) |
| Assignee | Max Rees (sroracle) |
| Reported | 2019-09-25 16:44:29 -0500 |
| Modified | 2019-09-30 15:01:41 -0500 |
| Status | RESOLVED FIXED |
| Version | 1.0-BETA3 |
| Hardware | Adélie Linux / All |
| Importance | --- / normal |
| URL | https://nvd.nist.gov/vuln/detail/CVE-2019-5094 |
Description
An exploitable code execution vulnerability exists in the quota file
functionality of E2fsprogs 1.45.3. A specially crafted ext4 partition
can cause an out-of-bounds write on the heap, resulting in code
execution. An attacker can corrupt a partition to trigger this
vulnerability.