CVE-2022-1304
HighSummary
An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.
Risk Assessment
An attacker could exploit this vulnerability to execute arbitrary code in the context of the e2fsprogs process, potentially leading to system compromise or data corruption.
Recommendation
Immediately update e2fsprogs to version 1.46.6 or later, which includes a fix for this vulnerability.
Other vulnerabilities in e2fsprogs
See all- CVE-2026-45531High
In the read_boot_region function of fsck.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- CVE-2019-5188High
A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.
- CVE-2019-5094High
An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3. A specially crafted ext4 partition can cause an out-of-bounds write on the heap, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.
Original NVD description (English source)
An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS