e2fsprogs vulnerabilities

2015-02-2300:00:00

ubuntu.com

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

9.6

Confidence

High

EPSS

0.001

Percentile

20.1%

JSON

Releases

Ubuntu 14.10
Ubuntu 14.04 ESM
Ubuntu 12.04
Ubuntu 10.04

Packages

e2fsprogs - ext2/ext3/ext4 file system utilities

Details

Jose Duart discovered that e2fsprogs incorrectly handled invalid block
group descriptor data. A local attacker could use this issue with a
crafted filesystem image to possibly execute arbitrary code.
(CVE-2015-0247, CVE-2015-1572)

OSVersionArchitecturePackageVersionFilename
Ubuntu14.10noarche2fsprogs< 1.42.10-1.1ubuntu1.2UNKNOWN
Ubuntu14.10noarchcomerr-dev< 2.1-1.42.10-1.1ubuntu1.2UNKNOWN
Ubuntu14.10noarche2fsck-static< 1.42.10-1.1ubuntu1.2UNKNOWN
Ubuntu14.10noarche2fslibs< 1.42.10-1.1ubuntu1.2UNKNOWN
Ubuntu14.10noarche2fslibs-dbg< 1.42.10-1.1ubuntu1.2UNKNOWN
Ubuntu14.10noarche2fslibs-dev< 1.42.10-1.1ubuntu1.2UNKNOWN
Ubuntu14.10noarche2fsprogs-dbg< 1.42.10-1.1ubuntu1.2UNKNOWN
Ubuntu14.10noarche2fsprogs-udeb< 1.42.10-1.1ubuntu1.2UNKNOWN
Ubuntu14.10noarchlibcomerr2< 1.42.10-1.1ubuntu1.2UNKNOWN
Ubuntu14.10noarchlibcomerr2-dbg< 1.42.10-1.1ubuntu1.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	14.10	noarch	e2fsprogs	< 1.42.10-1.1ubuntu1.2	UNKNOWN
Ubuntu	14.10	noarch	comerr-dev	< 2.1-1.42.10-1.1ubuntu1.2	UNKNOWN
Ubuntu	14.10	noarch	e2fsck-static	< 1.42.10-1.1ubuntu1.2	UNKNOWN
Ubuntu	14.10	noarch	e2fslibs	< 1.42.10-1.1ubuntu1.2	UNKNOWN
Ubuntu	14.10	noarch	e2fslibs-dbg	< 1.42.10-1.1ubuntu1.2	UNKNOWN
Ubuntu	14.10	noarch	e2fslibs-dev	< 1.42.10-1.1ubuntu1.2	UNKNOWN
Ubuntu	14.10	noarch	e2fsprogs-dbg	< 1.42.10-1.1ubuntu1.2	UNKNOWN
Ubuntu	14.10	noarch	e2fsprogs-udeb	< 1.42.10-1.1ubuntu1.2	UNKNOWN
Ubuntu	14.10	noarch	libcomerr2	< 1.42.10-1.1ubuntu1.2	UNKNOWN
Ubuntu	14.10	noarch	libcomerr2-dbg	< 1.42.10-1.1ubuntu1.2	UNKNOWN