CVE-2015-0247: Buffer Overflow
A heap buffer overflow was found in e2fsprgos lib/ext2fs/openfs.c. It allows a trivial arbitrary memory write under certain conditions.
Given that fsck is affected, and that an ext2/3/4 image can force a filesystem check on mount, this will allow code execution on systems that have automount enabled by just plugging a device.
Acknowledgements:
Red Hat would like to thank oCERT for reporting these issues. oCERT acknowledges Jose Duart of the Google Security Team as the original reporter.
Other sources
Heap-based buffer overflow in openfs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code via crafted block group descriptor data in a filesystem image.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-0247?
CVE-2015-0247 is classified as a critical severity vulnerability due to its potential for arbitrary memory writing and code execution.
How do I fix CVE-2015-0247?
To resolve CVE-2015-0247, upgrade the e2fsprogs package to version 1.42.12 or higher.
Which software is affected by CVE-2015-0247?
CVE-2015-0247 affects multiple versions of e2fsprogs and operating systems like Debian 7.0 and various Ubuntu versions up to 14.10.
Can CVE-2015-0247 be exploited remotely?
Yes, CVE-2015-0247 can potentially be exploited remotely due to its impact on automounting ext2/3/4 file systems.
What are the consequences of CVE-2015-0247 if exploited?
If CVE-2015-0247 is exploited, it can lead to arbitrary code execution within affected systems.