Heap-based buffer overflow in openfs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code via crafted block group descriptor data in a filesystem image.
CVSS 2.0MEDIUM 4.6·Local·No auth·Interaction —·EPSS 0.0089·Published 2015-02-17·Will not fixCWE-119
Heap-based buffer overflow in closefs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code by causing a crafted block group descriptor to be marked as dirty.
CVSS 2.0MEDIUM 4.6·Local·No auth·Interaction —·EPSS 0.00591·Published 2015-02-24·Will not fixCWE-119