cbcvebase.
CVE-2015-0247
published 2015-02-17

CVE-2015-0247: Heap-based buffer overflow in openfs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code via crafted block…

PriorityP426medium4.6CVSS 2.0
AVLACLAuNCPIPAP
EPSS
0.90%
55.6th percentile
Heap-based buffer overflow in openfs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code via crafted block group descriptor data in a filesystem image.

Affected

19 ranges
VendorProductVersion rangeFixed in
canonicalubuntu_linux——
canonicalubuntu_linux——
canonicalubuntu_linux——
canonicalubuntu_linux——
debiandebian_linux——
debiane2fsprogs< e2fsprogs 1.42.12-1 (bookworm)e2fsprogs 1.42.12-1 (bookworm)
debiane2fsprogs< e2fsprogs 1.42.12-1.1 (bookworm)e2fsprogs 1.42.12-1.1 (bookworm)
e2fsprogs_projecte2fsprogs<= 1.42.11—
e2fsprogs_projecte2fsprogs>= 0 < 1.42.12-11.42.12-1
e2fsprogs_projecte2fsprogs>= 0 < 1.42.12-1.11.42.12-1.1
e2fsprogs_projecte2fsprogs>= 0 < 1.42.12-11.42.12-1
e2fsprogs_projecte2fsprogs>= 0 < 1.42.12-1.11.42.12-1.1
e2fsprogs_projecte2fsprogs>= 0 < 1.42.12-11.42.12-1
e2fsprogs_projecte2fsprogs>= 0 < 1.42.12-1.11.42.12-1.1
e2fsprogs_projecte2fsprogs>= 0 < 1.42.12-11.42.12-1
e2fsprogs_projecte2fsprogs>= 0 < 1.42.12-1.11.42.12-1.1
e2fsprogs_projecte2fsprogs>= 0 < 1.42.9-3ubuntu1.21.42.9-3ubuntu1.2
fedoraprojectfedora——
fedoraprojectfedora——

CVSS provenance

nvdv2.04.6MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
osv4.6MEDIUM
vendor_debian4.6MEDIUM
vendor_redhat4.6MEDIUM
vendor_ubuntu4.6MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.