Heap-based buffer overflow in closefs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code by causing a crafted block group descriptor to be marked as dirty. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0247.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - e2fsprogs: potential buffer overflow in closefs() (incomplete CVE-2015-0247 fix) (CVE-2015-1572)

  - Heap-based buffer overflow in openfs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local     users to execute arbitrary code via crafted block group descriptor data in a filesystem image.
    (CVE-2015-0247)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - e2fsprogs: potential buffer overflow in closefs() (incomplete CVE-2015-0247 fix) (CVE-2015-1572)

  - Heap-based buffer overflow in openfs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local     users to execute arbitrary code via crafted block group descriptor data in a filesystem image.
    (CVE-2015-0247)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - e2fsprogs: potential buffer overflow in closefs() (incomplete CVE-2015-0247 fix) (CVE-2015-1572)

  - Heap-based buffer overflow in openfs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local     users to execute arbitrary code via crafted block group descriptor data in a filesystem image.
    (CVE-2015-0247)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

This update for e2fsprogs fixes the following issues :

Security issues fixed :

  - CVE-2015-0247: Fixed couple of heap overflows in     e2fsprogs (fsck, dumpe2fs, e2image...) (bsc#915402).

  - CVE-2015-1572: Fixed potential buffer overflow in     closefs() (bsc#918346).

Bug fixes :

  - bsc#1038194: generic/405 test fails with     /dev/mapper/thin-vol is inconsistent on ext4 file     system.

  - bsc#1009532: resize2fs hangs when trying to resize a     large ext4 file system.

  - bsc#960273: xfsprogs does not call     %(?regenerate_initrd_post).

This update was imported from the SUSE:SLE-15:Update update project.

This update for e2fsprogs fixes the following issues: Security issues fixed :

  - CVE-2015-0247: Fixed couple of heap overflows in     e2fsprogs (fsck, dumpe2fs, e2image...) (bsc#915402).

  - CVE-2015-1572: Fixed potential buffer overflow in     closefs() (bsc#918346). Bug fixes :

  - bsc#1038194: generic/405 test fails with     /dev/mapper/thin-vol is inconsistent on ext4 file     system.

  - bsc#1009532: resize2fs hangs when trying to resize a     large ext4 file system.

  - bsc#960273: xfsprogs does not call     %{?regenerate_initrd_post}.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for e2fsprogs fixes the following issues :

Security issues fixed :

  - CVE-2015-0247: Fixed couple of heap overflows in     e2fsprogs (fsck, dumpe2fs, e2image...) (bsc#915402).

  - CVE-2015-1572: Fixed potential buffer overflow in     closefs() (bsc#918346).

Bug fixes :

  - bsc#1038194: generic/405 test fails with     /dev/mapper/thin-vol is inconsistent on ext4 file     system.

  - bsc#1009532: resize2fs hangs when trying to resize a     large ext4 file system.

  - bsc#960273: xfsprogs does not call     %{?regenerate_initrd_post}.

This update was imported from the SUSE:SLE-15:Update update project.

According to the versions of the e2fsprogs packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The e2fsprogs package contains a number of utilities     for creating, checking, modifying, and correcting any     inconsistencies in second, third and fourth extended     (ext2/ext3/ext4) filesystems. E2fsprogs contains e2fsck     (used to repair filesystem inconsistencies after an     unclean shutdown), mke2fs (used to initialize a     partition to contain an empty ext2 filesystem), debugfs     (used to examine the internal structure of a     filesystem, to manually repair a corrupted filesystem,     or to create test cases for e2fsck), tune2fs (used to     modify filesystem parameters), and most of the other     core ext2fs filesystem utilities.

  - You should install the e2fsprogs package if you need to     manage the performance of an ext2, ext3, or ext4     filesystem.

  - Security Fix(es)

  - Heap-based buffer overflow in closefs.c in the     libext2fs library in e2fsprogs before 1.42.12 allows     local users to execute arbitrary code by causing a     crafted block group descriptor to be marked as dirty.
    NOTE: this vulnerability exists because of an     incomplete fix for CVE-2015-0247.(CVE-2015-1572)

  - Heap-based buffer overflow in openfs.c in the libext2fs     library in e2fsprogs before 1.42.12 allows local users     to execute arbitrary code via crafted block group     descriptor data in a filesystem image.(CVE-2015-0247)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Two security issues were fixed in e2fsprogs :

CVE-2015-0247: Various heap overflows were fixed in e2fsprogs (fsck, dumpe2fs, e2image).

CVE-2015-1572: Fixed a potential buffer overflow in closefs().
(bsc#918346)

Additionally, badblocks was enhanced to work with very large partitions. (bsc#932539)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Two security issues were fixed in e2fsprogs :

Security issues fixed :

  - CVE-2015-0247: Various heap overflows were fixed in     e2fsprogs (fsck, dumpe2fs, e2image...).

  - CVE-2015-1572: Fixed a potential buffer overflow in     closefs() (bsc#918346 )

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201507-22 (e2fsprogs: Arbitrary code execution)

    e2fsprogs has a heap-based buffer overflow in closefs.c in the libext2fs       library.
  Impact :

    A local attacker could execute arbitrary code via a specially crafted       block group descriptor.
  Workaround :

    There is no known workaround at this time.

This update provides the following security-fixes for e2fsprogs :

libext2fs: fix potential buffer overflow in closefs() (bsc#918346, CVE-2015-1572) libext2fs: avoid buffer overflow if s_first_meta_bg is too big (bsc#915402, CVE-2015-0247)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

e2fsprogs was updated to fix two security issues.

The following vulnerabilities were fixed :

  - CVE-2015-1572: A local user could have executed     arbitrary code by causing a crafted block group     descriptor to be marked as dirty. Completes fix for     CVE-2015-0247. (boo#918346)

  - CVE-2015-0247: A local user could have executed     arbitrary code via crafted block group descriptor data     in a filesystem image. (boo#915402)

e2fsprogs was updated to fix one security issue.

The following vulnerability was fixed :

  - CVE-2015-1572: A local user could have executed     arbitrary code by causing a crafted block group     descriptor to be marked as dirty. (boo#918346)

Updated e2fsprogs packages fix security vulnerability :

The libext2fs library, part of e2fsprogs and utilized by its utilities, is affected by a boundary check error on block group descriptor information, leading to a heap based buffer overflow. A specially crafted filesystem image can be used to trigger the vulnerability. This is due to an incomplete fix for CVE-2015-0247 (CVE-2015-1572).

Updated e2fsprogs packages fix security vulnerabilities :

The libext2fs library, part of e2fsprogs and utilized by its utilities, is affected by a boundary check error on block group descriptor information, leading to a heap based buffer overflow. A specially crafted filesystem image can be used to trigger the vulnerability (CVE-2015-0247).

The libext2fs library, part of e2fsprogs and utilized by its utilities, is affected by a boundary check error on block group descriptor information, leading to a heap based buffer overflow. A specially crafted filesystem image can be used to trigger the vulnerability. This is due to an incomplete fix for CVE-2015-0247 (CVE-2015-1572).

Jose Duart of the Google Security Team discovered a buffer overflow in in e2fsprogs, a set of utilities for the ext2, ext3, and ext4 file systems. This issue can possibly lead to arbitrary code execution if a malicious device is plugged in, the system is configured to automatically mount it, and the mounting process chooses to run fsck on the device's malicious filesystem.

CVE-2015-1572

Incomplete fix for CVE-2015-0247.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Fix potential buffer overflow in closefs (#1193947,     CVE-2015-1572)

    - Fix dumpe2fs segfault with no arguments (#1194063)

    - Don't require fsck prior to resize2fs -P (#1170803)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Fix potential buffer overflow in closefs (#1193947,     CVE-2015-1572)

    - Fix dumpe2fs segfault with no arguments (#1194063)

    - Don't require fsck prior to resize2fs -P (#1170803)       Changes e2fsck.conf so that for filesystems with       time-based check intervals set in the superblock,       these time-based checks will work again. You may need       to wait through an e2fsck on your next reboot in this       case.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2507-1 advisory.

    Jose Duart discovered that e2fsprogs incorrectly handled invalid block group descriptor data. A local     attacker could use this issue with a crafted filesystem image to possibly execute arbitrary code.
    (CVE-2015-0247, CVE-2015-1572)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Theodore Ts'o reports :

On a carefully crafted filesystem that gets modified through tune2fs or debugfs, it is possible to trigger a buffer overrun when the file system is closed via closefs().

Jose Duart of the Google Security Team discovered a buffer overflow in e2fsprogs, a set of utilities for the ext2, ext3, and ext4 file systems. This issue can possibly lead to arbitrary code execution if a malicious device is plugged in, the system is configured to automatically mount it, and the mounting process chooses to run fsck on the device's malicious filesystem.

  - CVE-2015-0247     Buffer overflow in the ext2/ext3/ext4 file system     open/close routines.

  - CVE-2015-1572     Incomplete fix for CVE-2015-0247.

ID	Name	Product	Family	Severity
198549	RHEL 5 : e4fsprogs (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
198502	RHEL 6 : e4fsprogs (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
198448	RHEL 7 : e4fsprogs (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
123227	openSUSE Security Update : e2fsprogs (openSUSE-2019-538)	Nessus	SuSE Local Security Checks	medium
120051	SUSE SLED15 / SLES15 Security Update : e2fsprogs (SUSE-SU-2018:1987-1)	Nessus	SuSE Local Security Checks	medium
111423	openSUSE Security Update : e2fsprogs (openSUSE-2018-771)	Nessus	SuSE Local Security Checks	medium
99801	EulerOS 2.0 SP1 : e2fsprogs (EulerOS-SA-2016-1038)	Nessus	Huawei Local Security Checks	medium
85375	SUSE SLED11 / SLES11 Security Update : e2fsprogs (SUSE-SU-2015:1364-1)	Nessus	SuSE Local Security Checks	medium
85239	SUSE SLED12 / SLES12 Security Update : e2fsprogs (SUSE-SU-2015:1341-1)	Nessus	SuSE Local Security Checks	medium
84974	GLSA-201507-22 : e2fsprogs: Arbitrary code execution	Nessus	Gentoo Local Security Checks	medium
84395	SUSE SLED11 / SLES11 Security Update : e2fsprogs (SUSE-SU-2015:1103-1)	Nessus	SuSE Local Security Checks	medium
84013	openSUSE Security Update : e2fsprogs (openSUSE-2015-400)	Nessus	SuSE Local Security Checks	medium
84012	openSUSE Security Update : e2fsprogs (openSUSE-2015-399)	Nessus	SuSE Local Security Checks	medium
82321	Mandriva Linux Security Advisory : e2fsprogs (MDVSA-2015:068)	Nessus	Mandriva Local Security Checks	medium
82320	Mandriva Linux Security Advisory : e2fsprogs (MDVSA-2015:067)	Nessus	Mandriva Local Security Checks	medium
82146	Debian DLA-162-1 : e2fsprogs security update	Nessus	Debian Local Security Checks	medium
81614	Fedora 20 : e2fsprogs-1.42.12-3.fc20 (2015-2516)	Nessus	Fedora Local Security Checks	medium
81613	Fedora 21 : e2fsprogs-1.42.12-3.fc21 (2015-2511)	Nessus	Fedora Local Security Checks	medium
81482	Ubuntu 14.04 LTS : e2fsprogs vulnerabilities (USN-2507-1)	Nessus	Ubuntu Local Security Checks	critical
81461	FreeBSD : e2fsprogs -- potential buffer overflow in closefs() (2a4bcd7d-bbb8-11e4-903c-080027ef73ec)	Nessus	FreeBSD Local Security Checks	medium
81446	Debian DSA-3166-1 : e2fsprogs - security update	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2015-1572

critical

Tenable Plugins

critical

critical

critical

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

critical

medium

medium