e2fsprogs: Arbitrary Code Execution

e2fsprogs: Arbitrary Code Execution A vulnerability has been discovered in e2fsprogs which can lead to arbitrary code execution. e2fsprogs 2024-02-18 2024-02-18 838388 local 1.46.6 1.46.6

e2fsprogs is a set of utilities for maintaining the ext2, ext3 and ext4 file systems.

Multiple vulnerabilities have been discovered in e2fsprogs. Please review the CVE identifiers referenced below for details.

An out-of-bounds read/write vulnerability was found in e2fsprogs. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.

There is no known workaround at this time.

All e2fsprogs users should upgrade to the latest version:


          # emerge --sync
          # emerge --ask --oneshot --verbose ">=sys-fs/e2fsprogs-1.46.6"

CVE-2022-1304 graaff graaff