TI-2007-05283 Aliases CVE-2007-5497 GHSA-r9pv-wqv4-69wf

Multiple integer overflows in libext2fs in e2fsprogs before 1.40.3 allow user-assisted…

LOW 33CWE-189Published 2007-12-07 · Updated 2024-08-07

Key facts

Attack vector: Network
Privileges required: None
User interaction: — Not recorded in CVSS 2.0
Attack complexity: Medium
Impact type: —
Confidentiality · integrity · availability: Partial · Partial · None
Fix status: Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.

Summary

Multiple integer overflows in libext2fs in e2fsprogs before 1.40.3 allow user-assisted remote attackers to execute arbitrary code via a crafted filesystem image.

Why it matters now

EPSS 0.04105 90th percentileScored 2026-11-07

Fix Fixed Red Hat: 1 advisory

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 41

CPE	Versions	Role	Vendor
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs::::::::	up to 1.40.2	Vulnerable	Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.02:::::::*	1.02	Vulnerable	Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.03:::::::*	1.03	Vulnerable	Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.04:::::::*	1.04	Vulnerable	Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.05:::::::*	1.05	Vulnerable	Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.06:::::::*	1.06	Vulnerable	Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.07:::::::*	1.07	Vulnerable	Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.08:::::::*	1.08	Vulnerable	Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.09:::::::*	1.09	Vulnerable	Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.10:::::::*	1.10	Vulnerable	Ext2 Filesystems Utilities

cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:*:*:*:*:*:*:*:* Versions up to 1.40.2 Vulnerable ·Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.02:*:*:*:*:*:*:* Versions 1.02 Vulnerable ·Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.03:*:*:*:*:*:*:* Versions 1.03 Vulnerable ·Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.04:*:*:*:*:*:*:* Versions 1.04 Vulnerable ·Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.05:*:*:*:*:*:*:* Versions 1.05 Vulnerable ·Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.06:*:*:*:*:*:*:* Versions 1.06 Vulnerable ·Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.07:*:*:*:*:*:*:* Versions 1.07 Vulnerable ·Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.08:*:*:*:*:*:*:* Versions 1.08 Vulnerable ·Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.09:*:*:*:*:*:*:* Versions 1.09 Vulnerable ·Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.10:*:*:*:*:*:*:* Versions 1.10 Vulnerable ·Ext2 Filesystems Utilities

Show 31 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.11:::::::*	1.11	Vulnerable	Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.12:::::::*	1.12	Vulnerable	Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.13:::::::*	1.13	Vulnerable	Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.14:::::::*	1.14	Vulnerable	Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.15:::::::*	1.15	Vulnerable	Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.16:::::::*	1.16	Vulnerable	Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.17:::::::*	1.17	Vulnerable	Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.18:::::::*	1.18	Vulnerable	Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.19:::::::*	1.19	Vulnerable	Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.20:::::::*	1.20	Vulnerable	Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.21:::::::*	1.21	Vulnerable	Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.22:::::::*	1.22	Vulnerable	Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.23:::::::*	1.23	Vulnerable	Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.24:::::::*	1.24	Vulnerable	Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.25:::::::*	1.25	Vulnerable	Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.26:::::::*	1.26	Vulnerable	Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.27:::::::*	1.27	Vulnerable	Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.28:::::::*	1.28	Vulnerable	Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.29:::::::*	1.29	Vulnerable	Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.30:::::::*	1.30	Vulnerable	Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.31:::::::*	1.31	Vulnerable	Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.32:::::::*	1.32	Vulnerable	Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.33:::::::*	1.33	Vulnerable	Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.34:::::::*	1.34	Vulnerable	Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.35:::::::*	1.35	Vulnerable	Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.36:::::::*	1.36	Vulnerable	Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.37:::::::*	1.37	Vulnerable	Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.38:::::::*	1.38	Vulnerable	Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.39:::::::*	1.39	Vulnerable	Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.40:::::::*	1.40	Vulnerable	Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.40.1:::::::*	1.40.1	Vulnerable	Ext2 Filesystems Utilities

cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.11:*:*:*:*:*:*:* Versions 1.11 Vulnerable ·Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.12:*:*:*:*:*:*:* Versions 1.12 Vulnerable ·Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.13:*:*:*:*:*:*:* Versions 1.13 Vulnerable ·Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.14:*:*:*:*:*:*:* Versions 1.14 Vulnerable ·Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.15:*:*:*:*:*:*:* Versions 1.15 Vulnerable ·Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.16:*:*:*:*:*:*:* Versions 1.16 Vulnerable ·Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.17:*:*:*:*:*:*:* Versions 1.17 Vulnerable ·Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.18:*:*:*:*:*:*:* Versions 1.18 Vulnerable ·Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.19:*:*:*:*:*:*:* Versions 1.19 Vulnerable ·Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.20:*:*:*:*:*:*:* Versions 1.20 Vulnerable ·Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.21:*:*:*:*:*:*:* Versions 1.21 Vulnerable ·Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.22:*:*:*:*:*:*:* Versions 1.22 Vulnerable ·Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.23:*:*:*:*:*:*:* Versions 1.23 Vulnerable ·Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.24:*:*:*:*:*:*:* Versions 1.24 Vulnerable ·Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.25:*:*:*:*:*:*:* Versions 1.25 Vulnerable ·Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.26:*:*:*:*:*:*:* Versions 1.26 Vulnerable ·Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.27:*:*:*:*:*:*:* Versions 1.27 Vulnerable ·Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.28:*:*:*:*:*:*:* Versions 1.28 Vulnerable ·Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.29:*:*:*:*:*:*:* Versions 1.29 Vulnerable ·Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.30:*:*:*:*:*:*:* Versions 1.30 Vulnerable ·Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.31:*:*:*:*:*:*:* Versions 1.31 Vulnerable ·Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.32:*:*:*:*:*:*:* Versions 1.32 Vulnerable ·Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.33:*:*:*:*:*:*:* Versions 1.33 Vulnerable ·Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.34:*:*:*:*:*:*:* Versions 1.34 Vulnerable ·Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.35:*:*:*:*:*:*:* Versions 1.35 Vulnerable ·Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.36:*:*:*:*:*:*:* Versions 1.36 Vulnerable ·Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.37:*:*:*:*:*:*:* Versions 1.37 Vulnerable ·Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.38:*:*:*:*:*:*:* Versions 1.38 Vulnerable ·Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.39:*:*:*:*:*:*:* Versions 1.39 Vulnerable ·Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.40:*:*:*:*:*:*:* Versions 1.40 Vulnerable ·Ext2 Filesystems Utilities
cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.40.1:*:*:*:*:*:*:* Versions 1.40.1 Vulnerable ·Ext2 Filesystems Utilities

Remediation

Red Hat 1 advisory

RHSA-2008:0003 Released 2008-01-07 · Red Hat rating Moderate
e2fsprogs security update
- Red Hat Desktop version 3 e2fsprogs-1.32-15.4, e2fsprogs-1.32-15.4.i386, e2fsprogs-devel-1.32-15.4 +1
- Red Hat Enterprise Linux (v. 5 server) e2fsprogs-1.39-10.el5_1.1, e2fsprogs-1.39-10.el5_1.1.i386, e2fsprogs-1.39-10.el5_1.1.ia64 +9
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 e2fsprogs-1.26-1.73, e2fsprogs-1.26-1.73.i386, e2fsprogs-1.26-1.73.ia64 +2
- Red Hat Enterprise Linux AS version 3 e2fsprogs-1.32-15.4, e2fsprogs-1.32-15.4.i386, e2fsprogs-1.32-15.4.ia64 +5
- Red Hat Enterprise Linux AS version 4 e2fsprogs-1.35-12.11.el4_6.1, e2fsprogs-1.35-12.11.el4_6.1.i386, e2fsprogs-1.35-12.11.el4_6.1.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) e2fsprogs-1.39-10.el5_1.1, e2fsprogs-1.39-10.el5_1.1.i386, e2fsprogs-libs-1.39-10.el5_1.1 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) e2fsprogs-1.39-10.el5_1.1, e2fsprogs-devel-1.39-10.el5_1.1, e2fsprogs-devel-1.39-10.el5_1.1.i386
- Red Hat Enterprise Linux Desktop version 4 e2fsprogs-1.35-12.11.el4_6.1, e2fsprogs-1.35-12.11.el4_6.1.i386, e2fsprogs-devel-1.35-12.11.el4_6.1 +1
- Red Hat Enterprise Linux ES version 2.1 e2fsprogs-1.26-1.73, e2fsprogs-1.26-1.73.i386, e2fsprogs-devel-1.26-1.73.i386
- Red Hat Enterprise Linux ES version 3 e2fsprogs-1.32-15.4, e2fsprogs-1.32-15.4.i386, e2fsprogs-1.32-15.4.ia64 +3
- Red Hat Enterprise Linux ES version 4 e2fsprogs-1.35-12.11.el4_6.1, e2fsprogs-1.35-12.11.el4_6.1.i386, e2fsprogs-1.35-12.11.el4_6.1.ia64 +3
- Red Hat Enterprise Linux WS version 2.1 e2fsprogs-1.26-1.73, e2fsprogs-1.26-1.73.i386, e2fsprogs-devel-1.26-1.73.i386
- Red Hat Enterprise Linux WS version 3 e2fsprogs-1.32-15.4, e2fsprogs-1.32-15.4.i386, e2fsprogs-1.32-15.4.ia64 +3
- Red Hat Enterprise Linux WS version 4 e2fsprogs-1.35-12.11.el4_6.1, e2fsprogs-1.35-12.11.el4_6.1.i386, e2fsprogs-1.35-12.11.el4_6.1.ia64 +3
- Red Hat Linux Advanced Workstation 2.1 e2fsprogs-1.26-1.73, e2fsprogs-1.26-1.73.ia64, e2fsprogs-devel-1.26-1.73.ia64

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

Product	Status	Plan or fix
Red Hat Desktop version 3	Fixed	RHSA-2008:0003
Red Hat Enterprise Linux (v. 5 server)	Fixed	RHSA-2008:0003
Red Hat Enterprise Linux AS (Advanced Server) version 2.1	Fixed	RHSA-2008:0003
Red Hat Enterprise Linux AS version 3	Fixed	RHSA-2008:0003
Red Hat Enterprise Linux AS version 4	Fixed	RHSA-2008:0003
Red Hat Enterprise Linux Desktop (v. 5 client)	Fixed	RHSA-2008:0003
Red Hat Enterprise Linux Desktop Workstation (v. 5 client)	Fixed	RHSA-2008:0003
Red Hat Enterprise Linux Desktop version 4	Fixed	RHSA-2008:0003
Red Hat Enterprise Linux ES version 2.1	Fixed	RHSA-2008:0003
Red Hat Enterprise Linux ES version 3	Fixed	RHSA-2008:0003
Red Hat Enterprise Linux ES version 4	Fixed	RHSA-2008:0003
Red Hat Enterprise Linux WS version 2.1	Fixed	RHSA-2008:0003
Red Hat Enterprise Linux WS version 3	Fixed	RHSA-2008:0003
Red Hat Enterprise Linux WS version 4	Fixed	RHSA-2008:0003
Red Hat Linux Advanced Workstation 2.1	Fixed	RHSA-2008:0003

Timeline

2026-10-02 Threatist record created from CVE-2007-5497
2026-10-03 Alias added: GHSA-r9pv-wqv4-69wf

References

Advisory 11

Other 8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences