Red Hat Security Advisory

RHSA-2020:1913

e2fsprogs security, bug fix, and enhancement update

Released 2020-04-28 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 8) e2fsprogs-1.45.4-3.el8, e2fsprogs-devel-1.45.4-3.el8, e2fsprogs-libs-1.45.4-3.el8 +3

TI-2019-03644 CVE-2019-5188 · GHSA-qv2m-8j7x-p5c8

LOW 37

A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4.

CVSS 3.1HIGH 7.5 Local High privileges No interaction EPSS 0.01082 Published 2020-01-08 Partial fix CWE-787

TI-2019-03555 CVE-2019-5094 · GHSA-3498-94v2-7qqw

LOW 37

An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3.

CVSS 3.1HIGH 7.5 Local High privileges No interaction EPSS 0.01105 Published 2019-09-24 Partial fix CWE-787