CVE:CVE-2022-1304
CNNVD:CNNVD-202204-3423
E2fsprogs是一套用以维护ext2、ext3和ext4文件系统的工具程序集。
E2fsprogs 1.46.5 版本存在缓冲区错误漏洞，该漏洞源于应用中存在越界读取写入问题。攻击者利用该漏洞可以导致分段错误，并且可以通过特制文件系统执行任意代码。
solution:Upgrade e2fsprogs_project e2fsprogs to a higher version than 1.46.5,and avoid the version 1.46.5; Upgrade redhat enterprise_linux to a higher version than 6.0,7.0,8.0,and avoid the version 6.0,7.0,8.0; Upgrade fedoraproject fedora to a higher version than 35,and avoid the version 35