CVE-2019-5094

Name of the Vulnerable Software and Affected Versions E2fsprogs version 1.45.3

Description The issue is related to a code execution vulnerability in the quota file functionality of E2fsprogs, which can be triggered by a specially crafted ext4 partition. This can cause an out-of-bounds write on the heap, resulting in code execution. An attacker can exploit this by corrupting a partition.

Recommendations For E2fsprogs version 1.45.3, consider updating to a newer version that contains a fix for this issue, as no specific workaround is provided for this version. At the moment, there is no information about a newer version that contains a fix for this vulnerability.