CVE-2019-5188

Name of the Vulnerable Software and Affected Versions E2fsprogs e2fsck versions 1.43.3 through 1.45.4

Description A code execution issue exists in the directory rehashing functionality of E2fsprogs e2fsck. This is caused by an out-of-bounds write on the stack when processing a specially crafted ext4 directory, allowing an attacker to execute code by corrupting a partition. The vulnerability can also lead to unauthorized access to confidential data, disruption of data integrity, and denial of service.

Recommendations For versions 1.43.3 through 1.45.4, update to version 1.45.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the e2fsck utility until the update is applied. Avoid using e2fsck on potentially corrupted partitions until the issue is resolved.