CVE-2022-1304CWE-125CWE-787

CVE-2022-1304

High · published April 15, 2022

CVSS v3.1
7.8
EPSS
1%
Percentile
73.4
In the wild
Unconfirmed
What it is

An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01465 · 73.4th percentile
Weaknesses
CWE-125 · Out-of-bounds Read; CWE-787 · Out-of-bounds Write
Published
2022-04-15T01:15Z
Affected products (5)
ProductVersionsFixed in
e2fsprogs_project/e2fsprogsall versions—
redhat/enterprise_linuxall versions—
redhat/enterprise_linuxall versions—
redhat/enterprise_linuxall versions—
fedoraproject/fedoraall versions—
References (6)
https://bugzilla.redhat.com/show_bug.cgi?id=2069726 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=2069726 · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2024/10/msg00001.html · af854a3a-2127-422b-91ae-364da2661108https://security.netapp.com/advisory/ntap-20241122-0010/ · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-398330.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-419740.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 14 APR 20:05Z
    An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5
    cvelistv5