A heap-based buffer overflow flaw was found in e2fsprogs. A specially crafted Ext2/3/4 file system could cause an application using the ext2fs library (for example, fsck) to crash or, possibly, execute arbitrary code.
Platform | Package | Release Date | Advisory |
---|---|---|---|
Amazon Linux 1 | e2fsprogs | 2015-06-16 10:26 | ALAS-2015-542 |
Amazon Linux 1 | e2fsprogs | 2015-02-11 19:36 | ALAS-2015-478 |
Score Type | Score | Vector | |
---|---|---|---|
Amazon Linux | CVSSv2 | 6.9 | AV:L/AC:M/Au:N/C:C/I:C/A:C |
NVD | CVSSv2 | 4.6 | AV:L/AC:L/Au:N/C:P/I:P/A:P |