Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/e2fsprogs@1.46.2-2
purl pkg:deb/debian/e2fsprogs@1.46.2-2
Next non-vulnerable version 1.47.0-2
Latest non-vulnerable version 1.47.0-2
Risk 3.5
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-j492-qy8u-s7ht
Aliases:
CVE-2022-1304
An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.
1.47.0-2
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-ajtw-q7j1-h3b6 An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3. A specially crafted ext4 partition can cause an out-of-bounds write on the heap, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability. CVE-2019-5094
VCID-vbr4-88ur-wqcz A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability. CVE-2019-5188

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-06T05:34:40.718512+00:00 Debian Oval Importer Affected by VCID-j492-qy8u-s7ht https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0
2026-06-06T03:24:58.398972+00:00 Debian Oval Importer Fixing VCID-vbr4-88ur-wqcz https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0
2026-06-06T00:31:39.984708+00:00 Debian Oval Importer Fixing VCID-ajtw-q7j1-h3b6 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0