[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248149

 
 

909

 
 

194803

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2015-0247Date: (C)2015-02-18   (M)2023-12-22


Heap-based buffer overflow in openfs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code via crafted block group descriptor data in a filesystem image.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 4.6
Exploit Score: 3.9
Impact Score: 6.4
 
CVSS V2 Metrics:
Access Vector: LOCAL
Access Complexity: LOW
Authentication: NONE
Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL
  
Reference:
http://www.securityfocus.com/archive/1/534633/100/0/threaded
BID-72520
DSA-3166
FEDORA-2015-1840
FEDORA-2015-2511
FEDORA-2015-2516
GLSA-201701-06
MDVSA-2015:045
MDVSA-2015:067
SUSE-SU-2015:1103
USN-2507-1
e2fsprogs-cve20150247-bo(100740)
http://advisories.mageia.org/MGASA-2015-0061.html
http://git.kernel.org/cgit/fs/ext2/e2fsprogs.git/commit/?id=f66e6ce4
http://packetstormsecurity.com/files/130283/e2fsprogs-Input-Sanitization.html
http://www.ocert.org/advisories/ocert-2015-002.html
https://bugzilla.redhat.com/show_bug.cgi?id=1187032
openSUSE-SU-2015:1006

CPE    7
cpe:/o:fedoraproject:fedora:20
cpe:/o:fedoraproject:fedora:21
cpe:/o:canonical:ubuntu_linux:10.04::~~lts~~~
cpe:/o:debian:debian_linux:7.0
...
CWE    1
CWE-119
OVAL    11
oval:org.secpod.oval:def:89045418
oval:org.secpod.oval:def:24037
oval:org.secpod.oval:def:702428
oval:org.secpod.oval:def:1200108
...

© SecPod Technologies