Alerts This Week
Warning Icon 1 664
Alerts This Week
Warning Icon 1 664

Debian: DSA-4535-1 Moderate: e2fsprogs Buffer Overflow Risk

debian
Calendar Grey September 27, 2019
Debian Logo
Debian Security Bulletin DSA-4536-1: e2fsprogs presents a critical memory corruption issue that could lead to potential exploitation in specific cases.
Lilith of Cisco Talos discovered a buffer overflow flaw in the quota code used by e2fsck from the ext2/ext3/ext4 file system utilities

Summary

For the oldstable distribution (stretch), this problem has been fixed
in version 1.43.4-2+deb9u1.

For the stable distribution (buster), this problem has been fixed in
version 1.44.5-1+deb10u2.

We recommend that you upgrade your e2fsprogs packages.

For the detailed security status of e2fsprogs please refer to its
security tracker page at:
https://security-tracker.debian.org/tracker/source-package/e2fsprogs

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Package: e2fsprogs
CVE ID: CVE-2019-5094

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here