REDHAT-BUG-2069726: Medium severity e2fsprogs vulnerability

Published Mar 29, 2022

Updated

An out-of-bounds read/write vulnerability was found in e2fsprogs which can lead to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem. The issue occurs in ext2fsextentdelete() in lib/ext2fs/extent.c when path->left is equal to -1, resulting in a call to memmove() with invalid arguments.

Reference: https://bugzilla.redhat.com/showbug.cgi?id=2068113

Affected Software

1 affected component

e2fsprogs e2fsprogs

Event History

Mar 29, 2022

Data Sourced

via Red Hat·02:52 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2069726?

The severity of REDHAT-BUG-2069726 is critical due to the potential for arbitrary code execution.

How do I fix REDHAT-BUG-2069726?

To fix REDHAT-BUG-2069726, update e2fsprogs to the latest version where the vulnerability has been patched.

What causes the vulnerability REDHAT-BUG-2069726?

The vulnerability REDHAT-BUG-2069726 is caused by an out-of-bounds read/write in the ext2fs_extent_delete() function when certain conditions are met.

What are the risks of not addressing REDHAT-BUG-2069726?

Not addressing REDHAT-BUG-2069726 can lead to segmentation faults and the possibility of arbitrary code execution on affected systems.

Which software is affected by REDHAT-BUG-2069726?

The software affected by REDHAT-BUG-2069726 is e2fsprogs.