e2fsprogs: code execution
| Package(s): | e2fsprogs |
CVE #(s): | CVE-2015-1572
|
| Created: | February 23, 2015 |
Updated: | June 5, 2015 |
| Description: |
From the Debian advisory:
CVE-2015-0247 fixed a buffer overflow in in e2fsprogs, a set of utilities for the ext2, ext3, and ext4 file systems. This issue can possibly lead to arbitrary code execution if
a malicious device is plugged in, the system is configured to
automatically mount it, and the mounting process chooses to run fsck
on the device's malicious filesystem. That fix was incomplete. |
| Alerts: |
|
